CPDP is the sole standing body in Republic of Bulgaria, which, pursuant to PDPA, supervises the lawful personal data processing. After the accession of Republic of Bulgaria to the Schengen Area the Commission will be the supervisory authority responsible in accordance with national legislation to carry out an independent control on the information coming from the national section of the Schengen Information System and will observe whether processing and use of data entered in the Schengen Information System does not violate the rights of data subjects.
CPDP observes personal data processing , incl. NSIS data, as follows:
1. performs preliminary current and subsequent inspections of the personal data controllers;
2. handles complaints of individuals on violated rights.
3. issues compulsory instructions to data controllers in connection with personal data protection;
4. imposes a temporary ban on personal data processing (upon pre-notification)