Legislation

New EU Data Protection Legal Framework (applicable from May 2018)

• General Data Protection Regulation (Regulation (EU) 2016/679)
• Directive on Data Protection in Police and Criminal Justice Activities (Directive (EU) 2016/680)

National Legal Framework

• Constitution of the Republic of Bulgaria
• Personal Data Protection Act
• Electronic Communications Act
• Rules on the activity of the commission for personal data protection and its administration
• Ordinance № 1 dated 30 January 2013 on the minimum level of technical and organizational measures and the admissible type of personal data protection – repealed as of 25 May 2018

Other International and European Acts

• The universal declaration of human rights
• Convention for the protection of human rights and fundamental freedoms
• Convention 108 for the protection of individuals with regard to automatic processing of personal data
• Charter of Fundamental Rights of the European Union
• Directive 2002/58/EC concerning the processing of personal data and the protection of privacy in the electronic communications sector (directive on privacy and electronic communications)
• Council Framework Decision 2008/977/JHA on the protection of personal data processed in the framework of police and judicial cooperation in criminal matters (valid until entry into force the Directive (EU) 2016/680 on Data Protection in Police and Criminal Justice Activities)
• Directive (EU) 2016/681 on the Use of Passenger Name Record Data
• Regulation (EU) 211/2011 on the citizens’ initiative
• Commission Regulation (EU) 611/2013 on the measures applicable to the notification of personal data breaches under Directive 2002/58/EC of the European Parliament and of the Council on privacy and electronic communications
• Schengen Acquis