Welcome!
When it is UNNECCESSARY to grant consent for the collection and processing of personal data
Lately we are witnessing an increase in the requests for consent for the collection and processing of personal data of citizens by different service providers. In CPDP, on a daily basis, signals and questions arrive regarding the necessity to require and grant consent. We must not forget that ... more
CPDP’s legal statement on the processing of personal data by the Republic of Bulgaria Prosecutor’s Office when publishing press-releases and granting information for the purposes of journalism
On 22 June 2018, CPDP expressed a legal statement in response to a request from the Chief Prosecutor of Republic of Bulgaria, regarding the application of Regulation (EC) 2016/679 when publishing press-releases and granting information for the purposes of journalism from the Prosecutor’s ... more
New rules on data protection for EU institutions agreed
On 23 May 2018, representatives of the Council and the Parliament agreed on a new regulation on the handling of personal data by EU institutions and other EU bodies. The new rules are aligned with the general data protection regulation (GDPR) which enters into force on 25 May 2018. The new provisions ... more
CPDP received another recognition for its efforts and work to protect the rights of individuals
The General Data Protection Regulation (GDPR), which comes into force on 25 May 2018, also establishes the European Data Protection Board (EDPB). The Committee is an EU body with separate legal personality. It is comprised by the head of each national data protection authority and the European Data Protection ... more
The application of the General Data Protection Regulation commences today
As of today, 25 May 2018, in the European Union, commences the application of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and ... more
Important message regarding the obligation to communicate the details of the designated Data Protection Officer to the supervisory authority
In accordance with Art.37, para.7 Regulation(EU)2016/679 on informing the supervisory authority about the designated Data Protection Officer, CPDP accepted an example of a Notification, which the Controller/Processor shall fill and submit to CPDP. Instructions on how to fill ... more