20 years together

Privacy & Data Protection

Dimitrov, Petrov & Co. is a leading law firm, pioneer in the dynamic field of privacy and personal data protection in Bulgaria, as well as in all other aspects of the legal regime of information. The Privacy and Data Protection Practice Group is widely acknowledged for its broad practical experience and in-depth knowledge of the national and EU law requirements, and the lawyers are internationally recognised for the outstanding quality of the services provided to clients. The law firm’s international client base ranges from start-up companies to major blue-chip multinational and domestic companies, state authorities, municipalities, public bodies and NGOs. 
A specific advantage that allows Dimitrov, Petrov & Co.’s team to assist its clients with respect to their needs in the area of data protection and privacy is its boutique expertise in the area of information and communication technologies law gained over the years of investing in knowledge and continuous education of its lawyers. The acquired specific experience and knowledge help our experts to carry out detailed and comprehensive analyses of the legal aspects of various technologies, software, products, services and business models (including outsourcing of services, cloud services, Big Data, etc.), where data processing via various new technologies is involved.  
Over the years, Dimitrov, Petrov & Co.’s lawyers have assisted companies to manage data at every stage of the information life cycle, providing a considerable set of legal services:
 Consultations with regard to all aspects of personal data protection;
 Consultations with respect to the legal regime of special categories of information, such as classified information, public information, public sector information, bank secrecy, medical data, data generated in the telecom sector and other categories of information that are subject to a special legal regime; 
 Compliance with all domestic and European privacy and data protection laws, including with respect to the launch of new complex and advanced IT projects, innovative products and services;
 Full assistance with respect to the adjustment of clients’ business models and internal procedures to the applicable data protection requirements;
 Consultations and management of both national and international compliance projects, and thus effectively addressing clients’ cross-border projects needs;
 Elaboration of corporate privacy and information security policies and procedures; 
 Internal staff trainings focused on specific clients’ needs; 
 Assistance with respect to internal risk assessments projects and internal data protection, information security and compliance audits;
 Elaborating strategies for cross-border development and maintenance of international centralised databases and other complex international data transfers, and preparation of the necessary sets of documents and procedures;
 Full assistance with respect to international HR management projects and the related privacy and data protection issues; 
 Comprehensive and customised advice and assistance with respect to direct marketing and various other types of marketing campaigns;  
 Legal advice, assistance and representation with respect to various cases of requests for disclosure of data to the competent state bodies and other similar procedures, including searches and seizures;
 Legal representation and registration of data controllers at the Bulgarian Commission for Personal Data Protection;
 Legal advice, representation, negotiations and assistance with respect to projects for re-use of public sector information; etc.
Being appraised for their exclusive expertise and knowledge in this area, our lawyers were involved in drafting the guidelines for the implementation of Ordinance No. 1 dated 30 January 2013 on the minimum level of technical and organisational measures and the admissible type of personal data protection, as well as the internal guidelines on the control activities performed by the Bulgarian Commission for Personal Data Protection. They also participated in consultations of the Commission with respect to the improvement of its effectiveness and efficiency, and in the respective trainings of its officials. 
The complex expertise along with the law-making experience of our experts are well  trusted by various government bodies (ministries, state agencies and commissions), and our team is regularly assigned to assist them in drafting the legislation, state strategies and strategical consultations related to their competences and activities. 
Dimitrov, Petrov & Co.’s lawyers lecture on numerous international conferences and forums, sector specific workshops (banking, marketing, media, telecoms, medical, IT national security, etc.) as well as seminars on data protection, including training of state officials, judges, prosecutors and others.


Representative Experience
Dimitrov, Petrov & Co. is the legal counsel of Google on their legal matters in Bulgaria with a special focus on privacy, data protection, ICT law, competition and regulatory issues. Google relies on our team’s interdisciplinary expertise to work in collaboration with its in-house and external legal teams across the world and deal with the legal aspects of its innovative business and technology projects for Central and Eastern Europe as well as the legal compliance of its products and services. 
The law firm advises Fox Networks Group on the drafting and revision of privacy policies for websites and mobile applications, terms and conditions for different online services, promotions, online games and competition on social networks. As part of the provided legal services, recently an expert from Dimitrov, Petrov & Co. trained the local legal team of FOX on relevant personal data protection issues related to their activities.
Telenor Bulgaria EAD has been relying on Dimitrov, Petrov & Co.’s data protection and data security services since 2009 and has assigned the law firm to consult it on its most complicated and important data protection, data retention and data security matters.
The team of Dimitrov, Petrov & Co. provides legal advice and assistance with respect to the online services of Jobs.bg. The lawyers have been assigned the analysis of the client business model, preparation of the relevant documentation, including general terms and conditions and privacy policies, and consultation on the overall legal framework.
The Privacy and Data Protection team assists a Bulgarian transport and logistics company with regard to a large scope of services connected to the daily operation of the client’s online courier platform. The law firm’s experts are responsible for an in-depth analysis of the client’s business models and services, preparation of relevant documentation, including general terms and conditions, and consultation on the overall legal framework.
The team of Dimitrov, Petrov & Co. provides full scope legal advice and assistance with respect to the launch of the innovative e-Health projects and the implementation of the advanced information systems, including with respect to the related processing and protection of sensitive data, to Pharma Marketing Advisors.  
Dimitrov, Petrov & Co. provides interdisciplinary legal services to a leading Bulgarian non-banking financial institution with regard to the in-depth analysis of its client business model and preparation of general terms for provision of financial services through various channels, including remote services. Consulting on the overall legal framework was provided as well.
Dimitrov, Petrov & Co. provides day-to-day legal advice and assistance to a Bulgarian NGO (Law and Internet Foundation) with regard to various legal issues related to the activities of the Foundation. Lawyers from Dimitrov, Petrov & Co. are involved as legal experts in various local and international projects of the Foundation in the area of ICT, e-Government, privacy and data protection, etc. Some of the law firm’s experts have been involved in a number of multinational EU-funded research projects in the area of privacy and data protection, some of which are developed and carried out in collaboration with Interpol.  
One of the world’s leading credit card providers entrusted the law firm with its privacy-related issues, such as review of privacy policies, relations with website users, terms of use for their corporate website, etc.
A major producer of personal computers assigned Dimitrov, Petrov & Co. the necessary legal consultations, preparation of the legal documents and representation before the Bulgarian data protection authority with respect to the implementation of their global HR and other information systems.
The lawyers of Dimitrov, Petrov & Co. have considerable experience in providing legal advice to one of the world’s biggest publishing houses concerning personal data processing for direct marketing purposes and preparation of a wide range of documents related to such processing.
 The team of Dimitrov, Petrov & Co. provides legal advice and assistance with respect to the implementation of global information systems within the corporate group of one of our international clients and the related cross-border data protection issues.
The law firm assists Nestle Bulgaria with regard to the conducting of a multi-level internal privacy and data protection training on the client’s data protection compliance matters and overall online presence. 
Dimitrov, Petrov & Co. has been continuously advising several global pharmaceutical, marketing and IT companies with regard to the implementation of their HR and other multinational cross-border data transfers.


Related News

Martin Zahariev discusses the balance between innovations and their regulation on Bloomberg TV

Martin Zahariev, PhD, associate at Dimitrov, Petrov & Co., was invited at the Business Start show of Bloomberg TV Bulgaria to comment on some hot topics from the area of information technology law in connection with the forthcoming European Research and Innovation Days (22-24 September). Challenges to the regulation of AI in various public spheres, its application in the legal... view more


CJEU Invalidates EU-US Privacy Shield, ambiguity as to the applicability of the Standard Contractual Clauses?

On 16 July 2020 the Court of Justice of the European Union (CJEU) issued a preliminary ruling with significant importance regarding the instruments for transfer of personal data outside EU to so called “third countries”, in particular to the US. Why it has come this far? The request for a preliminary ruling was made in connection with the actions of Austrian privacy activist Mr.... view more


Desislava Krusteva on the EU's strategy for AI regulation

The White Paper on Artificial Intelligence, which the European Commission released for public discussion at the end of February, ‘firmly indicates that Europe sees the development of AI technologies as a strategic priority. It puts forward ambitious plans for investments in this area, for targeted efforts towards providing the necessary skills, qualifications, scientific potential,... view more


Related Publications

GDPR Implementation Series - Bulgaria

Subject:ICT Law. Privacy and Data Protection

Published at:Lexxion

Edition:European Data Protection Law Review 3/2020

Almost 2.5 years since GDPR became effective, many things have changed. Most importantly, the privacy-awareness has drastically increased among both companies and citizens. Find out what happened during this period in Bulgaria (key legislative changes and most noteworthy cases) in the latest report by our experts Martin Zahariev and Radoslava Makshutova.

Mission (Im)Possible: Where GDPR Meets Commercial Arbitration

Download:dpco-navigating-out-of-safe-harbors-cee-legal-matters-10-2015.pdf (PDF, 955.10 kb)

Subject:ICT Law. Privacy and Data Protection

Edition:Austrian Yearbook on International Arbitration 2020

On the Admissibility of Certain Data Processing Operations of the Employers during Covid-19 Pandemic

Subject:ICT Law. Privacy and Data Protection

Published at:https://www.tita.bg/

In the emergency situation caused by the COVID-19 pandemic, employers face many challenges - from seeking to maintain employment and minimize losses to compliance with established anti-epidemic measures and protection of the lives and health of their employees. Martin Zahariev, PhD, examines several processing operations related to counteracting the spread of COVID-19 at the workplace and their admissibility from GDPR and Bulgarian law perspective.

*This publication is in Bulgarian


Contact Person

Desislava Krusteva


Desislava Krusteva