20 years together

Privacy & Data Protection

Overview
Dimitrov, Petrov & Co. is a leading law firm, pioneer in the dynamic field of privacy and personal data protection in Bulgaria, as well as in all other aspects of the legal regime of information. The Privacy and Data Protection Practice Group is widely acknowledged for its broad practical experience and in-depth knowledge of the national and EU law requirements, and the lawyers are internationally recognised for the outstanding quality of the services provided to clients. The law firm’s international client base ranges from start-up companies to major blue-chip multinational and domestic companies, state authorities, municipalities, public bodies and NGOs. 
 
A specific advantage that allows Dimitrov, Petrov & Co.’s team to assist its clients with respect to their needs in the area of data protection and privacy is its boutique expertise in the area of information and communication technologies law gained over the years of investing in knowledge and continuous education of its lawyers. The acquired specific experience and knowledge help our experts to carry out detailed and comprehensive analyses of the legal aspects of various technologies, software, products, services and business models (including outsourcing of services, cloud services, Big Data, etc.), where data processing via various new technologies is involved.  
 
Over the years, Dimitrov, Petrov & Co.’s lawyers have assisted companies to manage data at every stage of the information life cycle, providing a considerable set of legal services:
 Consultations with regard to all aspects of personal data protection;
 Consultations with respect to the legal regime of special categories of information, such as classified information, public information, public sector information, bank secrecy, medical data, data generated in the telecom sector and other categories of information that are subject to a special legal regime; 
 Compliance with all domestic and European privacy and data protection laws, including with respect to the launch of new complex and advanced IT projects, innovative products and services;
 Full assistance with respect to the adjustment of clients’ business models and internal procedures to the applicable data protection requirements;
 Consultations and management of both national and international compliance projects, and thus effectively addressing clients’ cross-border projects needs;
 Elaboration of corporate privacy and information security policies and procedures; 
 Internal staff trainings focused on specific clients’ needs; 
 Assistance with respect to internal risk assessments projects and internal data protection, information security and compliance audits;
 Elaborating strategies for cross-border development and maintenance of international centralised databases and other complex international data transfers, and preparation of the necessary sets of documents and procedures;
 Full assistance with respect to international HR management projects and the related privacy and data protection issues; 
 Comprehensive and customised advice and assistance with respect to direct marketing and various other types of marketing campaigns;  
 Legal advice, assistance and representation with respect to various cases of requests for disclosure of data to the competent state bodies and other similar procedures, including searches and seizures;
 Legal representation and registration of data controllers at the Bulgarian Commission for Personal Data Protection;
 Legal advice, representation, negotiations and assistance with respect to projects for re-use of public sector information; etc.
 
Being appraised for their exclusive expertise and knowledge in this area, our lawyers were involved in drafting the guidelines for the implementation of Ordinance No. 1 dated 30 January 2013 on the minimum level of technical and organisational measures and the admissible type of personal data protection, as well as the internal guidelines on the control activities performed by the Bulgarian Commission for Personal Data Protection. They also participated in consultations of the Commission with respect to the improvement of its effectiveness and efficiency, and in the respective trainings of its officials. 
 
The complex expertise along with the law-making experience of our experts are well  trusted by various government bodies (ministries, state agencies and commissions), and our team is regularly assigned to assist them in drafting the legislation, state strategies and strategical consultations related to their competences and activities. 
 
Dimitrov, Petrov & Co.’s lawyers lecture on numerous international conferences and forums, sector specific workshops (banking, marketing, media, telecoms, medical, IT national security, etc.) as well as seminars on data protection, including training of state officials, judges, prosecutors and others.
 

top

Representative Experience
Dimitrov, Petrov & Co. is the legal counsel of Google on their legal matters in Bulgaria with a special focus on privacy, data protection, ICT law, competition and regulatory issues. Google relies on our team’s interdisciplinary expertise to work in collaboration with its in-house and external legal teams across the world and deal with the legal aspects of its innovative business and technology projects for Central and Eastern Europe as well as the legal compliance of its products and services. 
 
The law firm advises Fox Networks Group on the drafting and revision of privacy policies for websites and mobile applications, terms and conditions for different online services, promotions, online games and competition on social networks. As part of the provided legal services, recently an expert from Dimitrov, Petrov & Co. trained the local legal team of FOX on relevant personal data protection issues related to their activities.
 
Telenor Bulgaria EAD has been relying on Dimitrov, Petrov & Co.’s data protection and data security services since 2009 and has assigned the law firm to consult it on its most complicated and important data protection, data retention and data security matters.
 
The team of Dimitrov, Petrov & Co. provides legal advice and assistance with respect to the online services of Jobs.bg. The lawyers have been assigned the analysis of the client business model, preparation of the relevant documentation, including general terms and conditions and privacy policies, and consultation on the overall legal framework.
 
The Privacy and Data Protection team assists a Bulgarian transport and logistics company with regard to a large scope of services connected to the daily operation of the client’s online courier platform. The law firm’s experts are responsible for an in-depth analysis of the client’s business models and services, preparation of relevant documentation, including general terms and conditions, and consultation on the overall legal framework.
 
The team of Dimitrov, Petrov & Co. provides full scope legal advice and assistance with respect to the launch of the innovative e-Health projects and the implementation of the advanced information systems, including with respect to the related processing and protection of sensitive data, to Pharma Marketing Advisors.  
 
Dimitrov, Petrov & Co. provides interdisciplinary legal services to a leading Bulgarian non-banking financial institution with regard to the in-depth analysis of its client business model and preparation of general terms for provision of financial services through various channels, including remote services. Consulting on the overall legal framework was provided as well.
 
Dimitrov, Petrov & Co. provides day-to-day legal advice and assistance to a Bulgarian NGO (Law and Internet Foundation) with regard to various legal issues related to the activities of the Foundation. Lawyers from Dimitrov, Petrov & Co. are involved as legal experts in various local and international projects of the Foundation in the area of ICT, e-Government, privacy and data protection, etc. Some of the law firm’s experts have been involved in a number of multinational EU-funded research projects in the area of privacy and data protection, some of which are developed and carried out in collaboration with Interpol.  
 
One of the world’s leading credit card providers entrusted the law firm with its privacy-related issues, such as review of privacy policies, relations with website users, terms of use for their corporate website, etc.
 
A major producer of personal computers assigned Dimitrov, Petrov & Co. the necessary legal consultations, preparation of the legal documents and representation before the Bulgarian data protection authority with respect to the implementation of their global HR and other information systems.
 
The lawyers of Dimitrov, Petrov & Co. have considerable experience in providing legal advice to one of the world’s biggest publishing houses concerning personal data processing for direct marketing purposes and preparation of a wide range of documents related to such processing.
 
 The team of Dimitrov, Petrov & Co. provides legal advice and assistance with respect to the implementation of global information systems within the corporate group of one of our international clients and the related cross-border data protection issues.
 
The law firm assists Nestle Bulgaria with regard to the conducting of a multi-level internal privacy and data protection training on the client’s data protection compliance matters and overall online presence. 
 
Dimitrov, Petrov & Co. has been continuously advising several global pharmaceutical, marketing and IT companies with regard to the implementation of their HR and other multinational cross-border data transfers.
 

Top

Related News
16Nov

Changes in the Audiovisual Media Services Directive protect the consumers against harmful content and foster European productions

On November 6, 2018 the European council adopted the third amendment in Directive 2010/13/EU concerning the provision of audiovisual media services (Audiovisual Media Services Directive). The new rules will introduce equal requirements for viewer protection with regard to media service providers' programs, regardless of the type of service they provide or the platform they use. For... view more

14Nov

THE NEW CYBERSECURITY ACT GOES LIVE

On 13th November 2018, the new Cybersecurity Act (the CA) was promulgated in State Gazette. The CA is the first comprehensive piece of Bulgarian legislation in the area of cybersecurity. It was adopted in order to implement the requirements under Directive 2016/1148 of the European Parliament and of the Council of 6 July 2016 concerning measures for a high common level of security of network... view more

22Oct

Att. Desislava Krusteva is a panelist in the 40th International Conference of Data Protection and Privacy Commissioners

From 22nd to 26th October 2018, the 40th International Conference of Data Protection and Privacy Commissioners (ICDPPC) will take place. This is the most prestigious event for exchange of ideas, practice and analysis of the global trends in the private data protection. This year the conference is focused on the ethical aspects of personal data processing in the digital era and will take place... view more

Top

Related Publications

Obligation to appoint a DPO and to notify the CPDP

Published at:TITA

Edition:TITA

* This publication is in Bulgarian.

Are there any mandatory data protection measures under GDPR?

Topic:ICT Law. Privacy and Data Protection

Published at:TITA

Edition:TITA

* This publication is in Bulgarian.

The Obligation to Maintain a Record of Processing Activities – Some Practical Guidelines

Download:g-dimitrov-e-justice-as-adopted-in-bulgaria-article-for-digital-evidence-vol-10-2013.pdf (PDF, 7.86 mb)

Topic:ICT Law. Privacy and Data Protection

Published at:TITA

Edition:TITA

* This publication is in Bulgarian.

Top

Contact Person

Desislava Krusteva

Partner

Desislava Krusteva

Top