Which authority enforces data protection in Bulgaria?

The Commission for Personal Data Protection, the CPDP, enforces the GDPR and the national Personal Data Protection Act in Bulgaria.

Do I need consent for cookies in Bulgaria?

Yes. The Electronic Communications Act requires consent for non-essential cookies, so trackers should be blocked until the user opts in.

Kesatuan Eropah

Persetujuan kuki di България

Persetujuan dan undang-undang privasi di България

Bulgaria enforces the GDPR through the CPDP, supported by the national Personal Data Protection Act. Cookie rules derive from the Electronic Communications Act and require consent for non-essential cookies. The CPDP has issued guidance and fines, including a notable penalty following a tax agency data breach that exposed millions of records. Bulgarian guidance requires opt-in consent, clear information in Bulgarian, and an easy reject path. The CPDP treats online identifiers as personal data and expects controllers to secure data adequately. Banners should not rely on implied consent and should avoid pre-ticked boxes.

Pihak berkuasa

Commission for Personal Data Protection (CPDP)

Status

GDPR applies since 25 May 2018, with the Bulgarian Personal Data Protection Act

Undang-undang utama

GDPR

Bahasa

Български

Siapa yang wajib mematuhi

Any organization that offers goods or services to people in the EU or monitors their behavior, wherever the organization is based.

Penalti

Up to 20 million euros or 4 percent of global annual turnover, whichever is higher

Kewajipan utama

Obtain prior, opt-in consent before non-essential cookies
Make refusing as easy as accepting
Keep records that prove consent
Honor withdrawal at any time
Respect data subject rights (access, erasure, portability)

Panduan tempatan

Obtain opt-in consent for non-essential cookies
Provide notices in Bulgarian
Secure personal data adequately, as the CPDP enforces on breaches
Avoid pre-ticked boxes and implied consent

Bagaimana ConsentX membantu

Prior-script blocking for true opt-in
Equal-weight Allow and Reject controls
Tamper-evident consent receipts and evidence
One-click withdrawal trigger
Built-in DSAR workflow with 30-day SLA

Mula secara percuma

yoursite.com

България

Kami menghargai privasi anda

Kami meminta persetujuan anda sebelum sebarang kuki bukan penting, mengikut peraturan yang terpakai di wilayah anda.

Benarkan semuaTolak yang bukan pentingUrus keutamaan

Persetujuan direkodkan

sha256 · chain ok

Halaman ini diterjemah secara mesin dan mungkin mengandungi kesilapan. Sila semak butiran undang-undang dengan penasihat guaman tempatan yang berkelayakan sebelum bergantung padanya.

Sediakan България dengan ConsentX

Sepanduk mengikut wilayah, sekatan skrip awal, DSAR dan bukti kalis usik.

Mula secara percuma Tempah demo

Cara mematuhi България dengan ConsentX

1
Imbas laman web anda
Jalankan imbasan percuma untuk mencari setiap kuki dan penjejak di laman anda, supaya anda tahu dengan tepat apa yang memerlukan persetujuan di bawah България.
2
Paparkan sepanduk persetujuan mengikut wilayah
Tambah sepanduk ConsentX. Ia mengesan wilayah setiap pelawat dan memaparkan secara automatik pengalaman persetujuan yang dikehendaki България.
3
Sekat penjejak sehingga ada persetujuan
Kekalkan kuki dan penjejak bukan penting dalam keadaan disekat sehingga pelawat bersetuju, supaya tiada apa-apa berjalan sebelum persetujuan.
4
Rekod bukti kalis usik
Setiap pilihan disimpan sebagai resit persetujuan kalis usik yang boleh anda kemukakan dalam audit България.
5
Uruskan permintaan data tepat pada masanya
Gunakan aliran kerja DSAR terbina dengan pemasa SLA untuk menjawab permintaan akses, pemadaman dan penarikan diri dalam tempoh yang ditetapkan undang-undang.