National Revenue Agency
€2,600,000
Insufficient technical and organisational measures to ensure information security
Fecha de la decisión
28 de agosto de 2019
Autoridad
Data Protection Commision of Bulgaria (KZLD)
BG
Sector
Public Sector and Education
País
BG
Ley
GDPREstado
FINALDescripción
Leakage of personal data in a hacking attack due to inadequate technical and organisational measures to ensure the protection of information security. It was found that personal data concerning about 6 million persons was illegally accessible.
Citas legales
Art. 32
Problemas e infracciones
Insufficient technical and organisational measures to ensure information security