Privacy Regulations in Bulgaria
3 privacy and data protection regulations that apply in Bulgaria
Europe3
+27The GDPR sets the global standard for data protection, requiring explicit opt-in consent before processing personal data of EU/EEA residents. For websites, non-essential cookies must be blocked until visitors actively consent. Pre-ticked boxes and implied consent are invalid.
+27Article 5(3) of the ePrivacy Directive is the primary EU legal basis requiring cookie consent. It mandates prior informed consent before storing or accessing any information on a user's device, with narrow exceptions only for transmission necessity and explicitly requested services.
Bulgaria transposes the ePrivacy Directive through two laws: the Electronic Commerce Act and the Electronic Communications Act. The CPDP has been increasingly active in enforcement, though national cookie penalties remain modest compared to GDPR maximums.