Support Centre

You have out of 5 free articles left for the month

Signup for a trial to access unlimited content.

Start Trial

Continue reading on DataGuidance with:

Free Member

Limited Articles

Create an account to continue accessing select articles, resources, and guidance notes.

Free Trial

Unlimited Access

Start your free trial to access unlimited articles, resources, guidance notes, and workspaces.

Bulgaria: CPDP publishes 2022 activity report

The Commission for Personal Data Protection ('CPDP') announced, on 31 March 2023, that it had submitted, on 30 March 2023, its 2022 activity report in the National Assembly. In particular, the report outlines that, in 2022, the CPDP received 770 complaints from individuals, which represented a slight decrease compared to 2021, when the CPDP received 840 complaints. In this regard, the report notes that 178 complaints related to video surveillance, 89 to bank and credit institutions, and 68 to political parties, among others. In addition, the report outlines that the majority of complaints involved violations of Articles 5(1) and 6(1) of the General Data Protection Regulation (Regulation (EU) 2016/679) ('GDPR').

Moreover, the report specifies that in the reporting period the CPDP imposed:

  • nine warnings;
  • 32 reprimands;
  • seven orders to comply with a data subject's request to exercise their rights;
  • 89 orders to bring processing operations into compliance with the GDPR;
  • one prohibition of data processing;
  • one order to rectify or erase personal data, or to restrict the processing; and
  • 29 fines, totalling BGN 247,500 (approx. €126,545).

You can read the announcement here and the 2022 report here, both only available in Bulgarian.