Spasov&Bratanov successful in the annulment by the court of a BGN 1 Million (circa EUR 511,000) GDPR Fine
Our law firm has achieved a significant success in a challenge of an administrative sanctions court case concerning compliance with applicable data protection regulations.
Through a decision dated 19 January, the Sofia City Administrative Court upheld the ruling of the Sofia Regional Court, thus finally annulling the record-high administrative fine of BGN 1,000,000 imposed by the Chair of the Commission for Personal Data Protection (CPDP) on our client in its capacity of a data controller.
The sanction had been imposed pursuant to Article 83(4)(a) of Regulation (EU) 2016/679 (GDPR) for alleged non-compliance with the controller’s obligations under Article 32(1)(b), (c) and (g) and Article 32(2), in conjunction with Article 5(1)(e) GDPR.
In its earlier decision the Sofia Regional Court found the penalty decree to be unlawful and annulled it in its entirety honouring our legal arguments to a great extent. The confirmation of that ruling by the Sofia City Administrative Court rendered the pursued annulment final.
The case demonstrates the effectiveness of judicial review of administrative sanctions in the field of personal data protection and the decisive role of appropriate and reasoned legal defense.
The client was represented by the partners Boyko Bratanov and Kremena Yaneva-Ivanova at all stages of the case.
Date: January 2026
Source: Spasov & Bratanov Law Firm