On the 24th of January 2019, the National Assembly of the Republic of Bulgaria passed a second reading of the Bill on Amendment and Supplement of the Personal Data Protection Act. The draft of the Bill was submitted by the Council of Ministers on 18.07.2018, and the first voting was on 19.09.2018.
Legislative changes in the current PDPA have been imposed in order to be implemented in the national legislation of the new European legal framework in the field of personal data protection. Since the 25th of May 2018, the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC is applied. The other main document, which applies from the 6th of May 2018, is Directive (EU) 2016/680 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data by competent authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, and on the free movement of such data.
After the adoption of the Bill, an update of the existing regulatory bylaws of CPDP is yet to come, concerning the procedure and methods for carrying out the control activities by the Commission, such as the Rules on the Activity of the Commission for the Personal Data Protection and its Administration, the Instruction for control activity, the Methodology for conducting sectoral audit, etc.
