Support Centre

You have out of 5 free articles left for the month

Signup for a trial to access unlimited content.

Start Trial

Continue reading on DataGuidance with:

Free Member

Limited Articles

Create an account to continue accessing select articles, resources, and guidance notes.

Free Trial

Unlimited Access

Start your free trial to access unlimited articles, resources, guidance notes, and workspaces.

Bulgaria: CPDP internal regulations amended in light of Whistleblower Protection and Public Disclosure Act

On April 28, 2023, the Rules to amend and supplement the Regulations for the activities of the Commission for Personal Data Protection (CPDP) and its administration were published in the Official Gazette of Bulgaria and entered into force on the same day, following a public consultation launched by the CPDP on March 31, 2023. In particular, the Rules introduce new provisions to reflect the competencies and powers assigned to the CPDP by the Whistleblower Protection and Public Disclosure Act of 2 February 2023 (the Whistleblower Act).

Under the Whistleblower Act, the CPDP acts as the central authority for external whistleblowing reporting and for the protection of persons reporting or publicly disclosing information on violations of Bulgarian law. Further to this, the Rules, among other things, provide for the establishment of an external reporting channel unit, which will assist the CPDP in the exercise of its powers under the Whistleblower Act.

You can read the Rules here and the public consultation here, both only available in Bulgarian.