News
The CPDP carried out training on „What to do in case of data breach?”
Online training on „What to do in case of data breach?” organised by the Bulgarian Industrial Capital Association and the CTeam Group took place on 14 October 2021. Pre-registered participants, most of them private business representatives, attended the training through a remote platform. The ... more
The Commission for Personal Data Protection issued an opinion on the processing of vaccination status data
In accordance with the significant public interest of citizens and organizations, CPDP expressed an opinion on issues related to the admissibility of processing data on the individuals vaccination status, taking into account the guidelines and principles of the European Data Protection Board ... more
The CPDP published its internal rules on the conduct of its supervisory activity
Due to an increased public interest in the Instruction on the practical implementation of the supervisory activity of the Personal Data Protection Commission, the Commission informed data controllers and processors that it published here. The Instruction is an internal document adopted on the ... more
The European Commission adopted two adequacy decisions for the UK
On June 28, 2021 the European Commission adopts adequacy decisions for the United Kingdom - one under the General Data Protection Regulation (GDPR) and the other under the Law Enforcement Directive. Personal data can now flow freely from the European Union to the United Kingdom where it benefits ... more
Agreement on protection of personal data of consumers signed by CPDP and NACP
Agreement on protection of consumers’ personal data when using services of online content providers was signed today Mr Ventsislav Karadjov, Chairman of the Commission for Protection of Personal Data (CPDP), and Mr Stoil Alipiev, Chairman of the National Association for Consumer Protection (NACP). One ... more
The CPPD published advices to data controllers and processors on data protection in cyberspace
Pursuant to Article 33 of Regulation (EU) 2016/679, data controllers have the obligation to notify a personal data breach to the supervisory authority. The Commission for Personal Data Protection, which is the supervisory authority in the Republic of Bulgaria, processes the notifications received, ... more