“5.1 million will be the fine for the National Revenue Agency (NRA) for leaking personal data of 5 million Bulgarians. This was announced by the chairman of the Commission for Personal Data Protection (CPDP) Ventsislav Karadzhov.
The agency has three days to appeal the decision. The fine could, by law, be up to 20 million levs. This fine is sufficient, taking into account the responsible behavior of the administrator. “The sanction is not to punish the administrator, but to make sure that this behavior is not repeated, which is illegal”, Karadzhov said.
The CPDP chairman also commented on the fine imposed on DSK Bank, commenting that it was imposed not because of data leakage, but because of stolen data on the hard disk. A total of 33 492 customers of the Bank were affected in 23 270 loan files.