BGCommission for Personal Data Protection18 October 2019Data breach

National Revenue Agency (Bulgaria)

National Revenue Agency (Bulgaria) fined by Commission for Personal Data Protection 5,100,000 BGN for data breach.

EUR€2,607,000

Country: BG
Authority: Commission for Personal Data Protection
Type: Data breach
Imposed: 18 October 2019
Added to register: 10 June 2026

Summary

The Commission for Personal Data Protection imposed a fine of 5,100,000 BGN on Bulgaria’s National Revenue Agency. The sanction concerned the unauthorized disclosure and dissemination of personal data following a major security breach.

Grounds for the decision

Unauthorized disclosure and dissemination of personal data after a security breach.