Data processing in the National Visa Information System of the Republic of Bulgaria and EU VIS (after Bulgaria`s accession to the Schengen area) is carried out in accordance with the Law for Protection of Personal Data, the regulations for its implementation and Regulation № 767 from 2008 of the European Parliament and the Council on the VIS and the exchange of data between Member States on short-stay visas.
The Commission for Personal Data Protection monitors the lawfulness of: the processing of personal data in National Visa Information System of the Republic of Bulgaria and EU VIS, the protection of rights of individuals when processing their personal data and accessing these data, according to the terms and conditions, determined by the Law for Protection of Personal Data. To perform its monitoring functions, the CPDP carries out checks on the activities, undertaken by the designated authorities in relation to access to NVIS and EU VIS. It includes lists and profiles of duly authorized officials, the management and the measures for access, the responsibility for the lawful data processing and retention under Art. 41, paragraph 5 of Regulation № 767 of 2008 of the European Parliament and the Council.