Data Protection and Compliance

The exceptional results achieved by the highly qualified and competent team of Georgiev, Todorov & Co. are what gives us grounds to be one of the leading law firms in Bulgaria.

In the field of ​​personal data protection, Georgiev, Todorov & Co. has many years of experience and our personal data protection team constantly improves its high qualification through participation in international and local trainings and conferences, consultations and cooperation with the Commission for Personal Data Protection (CPDP), active participation in the work of professional associations and groups in the field of risk management, development of effective corporate policies and internal rules, as well as measures to comply with applicable legislation. Since mid-2017, our lawyers are also part of the Compliance Committee of the German-Bulgarian Chamber of Industry and Commerce.

Georgiev, Todorov & Co. Law Firm provides legal advice in the field of personal data protection to key figures on the Bulgarian market in different business sectors. During over 25 years of practice, we have been consulting leading companies in relation to their overall activities, including processing and storage of personal data, representation through CPDP, the Commission for Consumer Protection (CCP), and the Commission for Protection of Competition (CPC). Currently, we actively consult various companies and public law organisations in connection with the entry into force of the European General Data Protection Regulation (EU 2016/679 – GDPR) and compliance with the requirements thereof.

During the long years of practice in the field of personal data protection, the firm has participated in numerous significant and large-scale international and local projects, including:

EXPERIENCE:

Bulgarian Telecommunications Company – For more than 15 years our team provides successful legal consultations and procedural representation of Bulgarian Telecommunications Company in numerous procedures before CPC. The firm advises the telecommunication services leader on the Bulgarian market on all issues related to the operator’s activities, including the protection of personal data. Our team represents the client before the administrative control authorities and provides full legal assistance for the registration of BTC as a personal data administrator in CPDP. Georgiev, Todorov & Co. Law Firm has also represented the operator in appeals against penal rulings for violation of the personal data protection regime under the Electronic Communications Act.

Microsoft Bulgaria – Georgiev, Todorov & Co. Law Firm has a major contribution, as an exclusive legal representative of the company, to starting the business activity of Microsoft Corporation on the Bulgarian market. For 17 years, our firm has been providing services to the subsidiary company Microsoft Bulgaria on all issues related to the company’s activity and compliance with applicable legislation. Our team provided legal advice and assistance for the registration of Microsoft Bulgaria as a personal data administrator upon their establishment on the territory of the Republic of Bulgaria.

Experian Bulgaria – The team of Georgiev, Todorov & Co. Law Firm provides legal advice and assistance to Experian Bulgaria regarding their registration as a personal data administrator by preparing all necessary internal documents and analyses in the overall procedure. The firm also consults the international company with regard to the conclusion of a contract for the exchange of data with public law bodies in relation to data from the Unified System for Civil Registration and Administrative Services of the Population (ESGRAON), National Social Security Institute (NSSI), National Revenue Agency (NRA), and others.

On Clinic – Georgiev, Todorov & Co. Law Firm provides the client with legal services regarding the overall activity of the clinic. It is the Bulgarian branch of On Clinic, an international Dutch company that has run a network of private clinics worldwide for more than 25 years. Besides issues related to the collection, processing and storage of personal data, our team also advises the clinic in connection with the introduction of the new European General Data Protection Regulation (EU 2016/679 – GDPR).

Our experts: