Login Request a demo

Platform

Compliance Hub Vendor Risk Hub PrivacyOps Hub RiskOps Hub Data Rooms Trust Center

Solutions

Demonstrate Diligence Vendor Risk Management Privacy Operations Audit Readiness — SOC 2 Frameworks

Resources

Breach Watch Intelligence Deep Trust Series Regulatory Watch Developers

Pricing About Login

Regulatory Watch / Jurisdictions / European Union / Bulgaria

BULGARIA

Regulators: Commission for Personal Data Protection

⚖️ Latest developments 🌐 Jurisdictions 📚 Law library

Laws that apply here

Also applies: European Union

Cyber Resilience Act Cyber Date not recorded Data Act Data governance In force since Sep 2025 Data Governance Act Data governance In force since Sep 2023 Digital Markets Act Platforms In force since May 2023 Digital Services Act Platforms In force since Feb 2024 ePrivacy Directive Privacy Date not recorded EU AI Act AI In force since Aug 2024 EU-U.S. Data Privacy Framework Transfers Date not recorded European Health Data Space Health Date not recorded General Data Protection Regulation Privacy In force since May 2018 Law Enforcement Directive Privacy In force since May 2018 NIS2 Directive Cyber In force since Oct 2024 Regulation (EU) 2018/1725 Privacy In force since Dec 2018 Standard Contractual Clauses Transfers Date not recorded

Developments

Moderate Enforcement Announced Bulgaria · Oct 1, 2026

European Commission sends formal notice to Bulgaria for non‑compliance with the Digital Services Act

The Commission issued a formal notice (INFR(2024)2241) to Bulgaria for failing to fully comply with the DSA, specifically for not designating and empowering the required Digital Services Coordinators. Bulgaria has two months to respond…

European Commission · Digital Services Act

Coming up

No stated dates ahead.