Which authority enforces data protection in Bulgaria?

The Commission for Personal Data Protection, the CPDP, enforces the GDPR and the national Personal Data Protection Act in Bulgaria.

Do I need consent for cookies in Bulgaria?

Yes. The Electronic Communications Act requires consent for non-essential cookies, so trackers should be blocked until the user opts in.

Unión Europea

Consentimiento de cookies en България

Consentimiento y protección de datos en България

Bulgaria enforces the GDPR through the CPDP, supported by the national Personal Data Protection Act. Cookie rules derive from the Electronic Communications Act and require consent for non-essential cookies. The CPDP has issued guidance and fines, including a notable penalty following a tax agency data breach that exposed millions of records. Bulgarian guidance requires opt-in consent, clear information in Bulgarian, and an easy reject path. The CPDP treats online identifiers as personal data and expects controllers to secure data adequately. Banners should not rely on implied consent and should avoid pre-ticked boxes.

Autoridad

Commission for Personal Data Protection (CPDP)

Estado

GDPR applies since 25 May 2018, with the Bulgarian Personal Data Protection Act

Ley principal

GDPR

Idiomas

Български

Quiénes deben cumplirla

Any organization that offers goods or services to people in the EU or monitors their behavior, wherever the organization is based.

Sanciones

Up to 20 million euros or 4 percent of global annual turnover, whichever is higher

Obligaciones clave

Obtain prior, opt-in consent before non-essential cookies
Make refusing as easy as accepting
Keep records that prove consent
Honor withdrawal at any time
Respect data subject rights (access, erasure, portability)

Orientación local

Obtain opt-in consent for non-essential cookies
Provide notices in Bulgarian
Secure personal data adequately, as the CPDP enforces on breaches
Avoid pre-ticked boxes and implied consent

Cómo ayuda ConsentX

Prior-script blocking for true opt-in
Equal-weight Allow and Reject controls
Tamper-evident consent receipts and evidence
One-click withdrawal trigger
Built-in DSAR workflow with 30-day SLA

Empezar gratis

yoursite.com

България

Valoramos tu privacidad

Te pedimos tu consentimiento antes de cualquier cookie no esencial, con las reglas que aplican en tu región.

Aceptar todoRechazar las no esencialesAdministrar preferencias

Consentimiento registrado

sha256 · chain ok

Esta página se tradujo automáticamente y puede contener errores. Revisa los detalles legales con un asesor local calificado antes de basarte en ella.

Prepara България con ConsentX

Banners por región, bloqueo previo de scripts, DSAR y pruebas inalterables.

Empezar gratis Agendar una demo

Cómo cumplir con България usando ConsentX

1
Escanea tu sitio web
Ejecuta un escaneo gratuito para encontrar cada cookie y rastreador de tu sitio, y saber exactamente qué requiere consentimiento según България.
2
Muestra un banner adaptado a la región
Agrega el banner de ConsentX. Detecta la región de cada visitante y muestra automáticamente la experiencia de consentimiento que exige България.
3
Bloquea los rastreadores hasta el consentimiento
Mantén bloqueadas las cookies y los rastreadores no esenciales hasta que la persona acepte, para que nada se active antes del consentimiento.
4
Guarda pruebas inalterables
Cada elección se guarda como un comprobante de consentimiento inalterable que puedes presentar en una auditoría de България.
5
Atiende las solicitudes a tiempo
Usa el flujo DSAR integrado con temporizadores de SLA para responder las solicitudes de acceso, eliminación y exclusión dentro del plazo legal.