Data Protection and Compliance

The exceptional results, achieved by the highly qualified and competent team of Georgiev, Todorov & Co, are what gives us grounds to believe that we are one of the leading law firms in the sector in Bulgaria.

Тhe law firm has long-term experience in the field of ​​personal data protection and our team constantly improves its professional qualifications through participation in international and local trainings and conferences, consultations and cooperation with the Commission for Personal Data Protection (CPDP), active participation in professional associations in the field of risk management, development of effective corporate policies and internal rules, as well as taking measures to comply with the applicable legislation in the sector.

Georgiev, Todorov & Co. provides legal advice in the field of personal data protection to key figures on the Bulgarian market in different business sectors for over 20 years. We have consulted leading companies in relation to their overall activities, including processing and storage of personal data, representation before the CPDP, the Commission for Consumer Protection (CCP), and the Commission for Protection of Competition (CPC), as well as about the registrations for data administrators, declarations, policies, contractual terms, codes of conduct, and risk management procedures.

In relation to the General Data Protection Regulation (EU 2016/679 – GDPR) entering into force and in order to comply with its requirements, the law firm provided comprehensive consultations to private companies (banking, financial, medical, insurance, B2B, and IT sector, as well as to ones which supply goods and services to end-users) and public-law organizations with the assistance of leading IT experts and certified auditors on information security.

During the long years of practice in the field, the law firm has participated in numerous large-scale international and local projects.


  • Georgiev, Todorov & Co. provides On Clinic with legal services regarding its overall activity as a representative of an international Dutch company that runs a network of private clinics worldwide for more than 25 years. Besides issues related to the collection, processing, and storage of personal data, our lawyers also advised the client in relation to the entry into force of the new General Data Protection Regulation, which was introduced by the Council of the European Union in 2018.
  • Our team provided legal support to Experian Bulgaria regarding their registration as a personal data administrator by preparing all necessary documents and analyses for the overall procedure. The law firm also consulted the international company with regards to the conclusion of contracts for the exchange of different types of data with public institutions.
  • For over 15 years Georgiev, Todorov & Co. provides successful legal consultations and procedural representation to the Bulgarian Telecommunications Company (BTC) in numerous procedures before CPC. The law firm advises the leader in the telecommunication services on the Bulgarian market on all issues related to the activities of the operator, including the protection of personal data. Our lawyers represented the client before the monitoring bodies and provided full legal assistance for its registration as a personal data administrator in CPDP.
  • Microsoft Bulgaria – full legal assistance on the establishment of the company in Bulgaria, including its registration as a personal data controller at CPDP, preparation of the relevant supporting documents, and its registration in the database.

Our experts: