Bulgaria: CPDP publishes 2022 activity report
The Commission for Personal Data Protection ('CPDP') announced, on 31 March 2023, that it had submitted, on 30 March 2023, its 2022 activity report in the National Assembly. In particular, the report outlines that, in 2022, the CPDP received 770 complaints from individuals, which represented a slight decrease compared to 2021, when the CPDP received 840 complaints. In this regard, the report notes that 178 complaints related to video surveillance, 89 to bank and credit institutions, and 68 to political parties, among others. In addition, the report outlines that the majority of complaints involved violations of Articles 5(1) and 6(1) of the General Data Protection Regulation (Regulation (EU) 2016/679) ('GDPR').
Moreover, the report specifies that in the reporting period the CPDP imposed:
- nine warnings;
- 32 reprimands;
- seven orders to comply with a data subject's request to exercise their rights;
- 89 orders to bring processing operations into compliance with the GDPR;
- one prohibition of data processing;
- one order to rectify or erase personal data, or to restrict the processing; and
- 29 fines, totalling BGN 247,500 (approx. €126,545).