Welcome!
CPDP adopted opinions on issues related to the application of Regulation (EU) 2016/679 (GDPR)
As a response to inquiries from banks and postal operators, CPDP interpreted the legal figures „controller” and „processor” of personal data in the context of the provision of services. The position of CPDP expressed in several opinions is the following: „1. Undertakings ... more
Sofia - host of the most important personal data protection forum
From 22 till 26 October 2018, simultaneously, in Sofia and Brussels will be held the 40th International Conference of Data Protection and Privacy Commissioners. The event is the most important global forum for expertise, practice and ideas exchange, as well as, for analysis of the personal data protection ... more
CPDP adopted criteria and procedures for the approval of Codes of conduct and аccreditation of monitoring bodies
On July 25, 2018, CPDP adopted criteria and procedures for the approval of Codes of conduct and accreditation of monitoring bodies. It was decided that the administration should immediately start working on the Codes of conduct that have been submitted so far according to the adopted rules and criteria. On ... more
When it is UNNECCESSARY to grant consent for the collection and processing of personal data
Lately we are witnessing an increase in the requests for consent for the collection and processing of personal data of citizens by different service providers. In CPDP, on a daily basis, signals and questions arrive regarding the necessity to require and grant consent. We must not forget that ... more
CPDP’s legal statement on the processing of personal data by the Republic of Bulgaria Prosecutor’s Office when publishing press-releases and granting information for the purposes of journalism
On 22 June 2018, CPDP expressed a legal statement in response to a request from the Chief Prosecutor of Republic of Bulgaria, regarding the application of Regulation (EC) 2016/679 when publishing press-releases and granting information for the purposes of journalism from the Prosecutor’s ... more
New rules on data protection for EU institutions agreed
On 23 May 2018, representatives of the Council and the Parliament agreed on a new regulation on the handling of personal data by EU institutions and other EU bodies. The new rules are aligned with the general data protection regulation (GDPR) which enters into force on 25 May 2018. The new provisions ... more