Expert articles and analysis on ZKS/NIS2, GDPR and artificial intelligence – practical guides for regulated entities in Bulgaria.
GDPRA complete guide to GDPR compliance for doctors, hospitals and healthcare facilities in Bulgaria: health data, DPO requirements, NHIS, telemedicine, video surveillance and retention periods.
Read more
AnalysisAn analysis of the websites of all Bulgarian municipalities against the requirements of GDPR and NIS2, together with an assessment of the current level of implementation of the tested criteria.
Read more
ZKS / NIS2The NIS2 Directive has been transposed in Bulgaria as of 17 February 2026. Which businesses fall within its scope, what the 10 mandatory measures are, the fines, and how to prepare. A practical guide with everything you need to know.
Read more
GDPRLearn what your GDPR obligations are when using cloud services (SaaS) – a DPA under Art. 28, sub-processors, transfers to the US (AWS, Google, Azure) and security measures.
Read more
GDPRHow schools can comply with the GDPR – legal bases, parental consent, video surveillance, electronic class registers (Shkolo), Google Classroom and protection of children’s data.
Read more
GDPRHow GDPR applies to mergers and acquisitions (M&A) – sharing data in a virtual data room, legal bases, succession to GDPR liability and post-integration. A practical guide.
Read more
GDPRAI and GDPR in Bulgaria in 2026 – the AI Act, DPIA for AI systems, fines of up to EUR 35 million, practical steps towards compliance. Expert analysis by GDPR BG.
Read more
GDPRA GDPR audit is a systematic review that assesses the extent to which an organisation complies with the requirements of Regulation (EU) 2016/679 on the protection of personal data. It covers documentation, technical measures, organisational procedures and actual practices. The audit is…
Read more
ZKS / NIS2On 13 February 2026, the updated Cybersecurity Act (State Gazette No. 17/13.02.2026), which transposes the European NIS2 Directive, entered into force. Art. 22 lists 12 specific measures that every obliged entity – municipality, port, hospital, water and sewerage operator – must…
Read more
ZKS / NIS2We didn’t need a password. We didn’t need access to the server. We opened the browser, loaded a municipality’s public website and within 15 minutes found 7 violations of the Cybersecurity Act (ZKS), the GDPR and the e-Government Act (ZEU) – each of which can lead to a fine.
Read more