On 2 March 2018, a meeting between the Chairman of CPDP and experts from the Commission and representatives of the three energy distribution companies in Bulgaria – CEZ Bulgaria, EVN Bulgaria and Energo-Pro Bulgaria took place. The three companies took, and the goal – to receive clarification and answers to practical questions, linked to the preparation for the application of the General Data Protection Regulation on 25 May 2018.
The discussions were focused on:
– Legal basis for the lawful processing of personal data of natural persons, clients of the three companies;
– Measures guaranteeing data security;
– The necessity to train data protection officers.
Also discussed were various other specific practical questions like: settling the relationship between the controller and the data processor, drafting internal registers, compliance with the requirement to keep data up-to-date.
Special attention was given to the deadlines to retain data and the requirement to present short and clear information to the data subjects in accordance with the transparency of data processing obligation.
