Insights

News

Our latest thinking on the issues that matter most in business and management.

Critical PHP Vulnerabilities: What Are the Risks for Businesses and How Should You Respond?

On 21 October 2026, updates were released for two critical vulnerabilities in PHP - a technology widely used for websites, online stores, and business applications. The vulnerabilities may expose companies to the risk of unauthorized access to systems and data, including where the maintenance of the relevant services has been outsourced. This alert summarizes the specific steps companies should verify with their IT teams and the legal obligations that may arise if an incident is identified.

The EmpCo Directive: Stricter Rules on Green Claims

ESG in Bulgaria after the Omnibus: A Lighter Reporting Landscape

Crypto is no longer invisible to the tax authorities

DPC Shorts: Ivan Manev on VAT for uncollectible receivables

An amendment to the VAT Act was adopted, providing for the possibility to reduce the taxable amount of supplies for which the receivables have become irrecoverable

Ivan Alexander Manev

The EU Blue Card facilitates employing highly qualified citizens outside the Union

At the end of January, important legal changes were adopted governing the conditions and procedure for issuing a long-term residence and work permit of the “EU Blue Card” type. The changes are aimed at facilitating access to the Bulgarian labour market for highly qualified citizens outside the European Union (EU) which could have a positive impact on labour shortages in a number of sectors of the Bulgarian economy.

Rositsa Vasileva

DPC advised Kolichka.bg on the local aspects of an international M&A transaction

Kolichka.bg's parent company in the Czech Republic Košík Holding was the target of the acquisition with METRO AG acquiring a 25% stake

Whistleblowers Protection Act adopted

Whistleblowers Protection Act (full name: Protection of Persons Who Report Breaches or Publicly Disclose Information on Breaches Act) (the Act) was adopted at second reading on the Parliament’s last working day and promulgated in the State Gazette.

Amendments to the VAT Act

An amendment to the VAT Act has been adopted, providing for the possibility to reduce the taxable amount of supplies for which the receivables have become uncollectible

Ivan Alexander Manev

DPC Shorts: Radina Tomanova on the latest amendments to the Bulgarian Labour Code

In this video our labour law expert Radina Tomanova briefly presents three amendments to the Bulgarian Labor Code made in 2022 and affecting employees that: 1. conclude an employment contract with a term of up to one year; 2. want to work for more than one employer; 3. are fathers of children up to the age of 8.

Radina Tomanova

DPC Shorts: Pavlina Ivanova on construction categories

Depending on the characteristics, significance, complexity and risks of operation, construction in Bulgaria is categorised from the first to the sixth category. Why is construction categorisation necessary? Who is responsible for proper categorization? What is the case law in construction categorization cases? These questions are answered by Pavlina Ivanova, a leading expert in property and construction law.

Pavlina Ivanova

DPC Shorts: Viktoriya Veleva on cryptoasset regulation

Interested in crypto assets? Did you know that the institutions are discussing the introduction of a regulation on crypto asset markets? The widespread use of cryptocurrencies and the introduction of new high-tech processes pose a challenge to already established tax and financial regulations at European level. Find out what the EU legislative initiatives are and what they aim to achieve in this video with Viktoriya Veleva, technology and data law expert at DPC. *This video is in Bulgarian

Viktoriya Veleva

DPC awarded Law Firm of the Year for Bulgaria 2022 by Who’s Who Legal

Our founding partner Assoc. Prof. George Dimitrov received the prestigous award at a black-tie ceremony held in London on 16 November.

Prof. George Dimitrov, DSc

October 21, 2026

Critical PHP Vulnerabilities: What Are the Risks for Businesses and How Should You Respond?

On 21 October 2026, updates were released for two critical vulnerabilities in PHP - a technology widely used for websites, online stores, and business applications. The vulnerabilities may expose companies to the risk of unauthorized access to systems and data, including where the maintenance of the relevant services has been outsourced. This alert summarizes the specific steps companies should verify with their IT teams and the legal obligations that may arise if an incident is identified.

Desislava Krusteva

October 22, 2026

The EmpCo Directive: Stricter Rules on Green Claims

From 27 September 2026, public sustainability claims will face clearer and more targeted legal scrutiny. This is particularly relevant for companies operating in Bulgaria

Ana-Mari Eremieva

October 19, 2026

ESG in Bulgaria after the Omnibus: A Lighter Reporting Landscape

Тhe Omnibus has reduced mandatory ESG reporting obligations for most Bulgarian companies and mandatory reporting is now unlikely to apply for them

Ana-Mari Eremieva

October 14, 2026

When Algorithms Decide Who Gets to Work: Key GDPR Lessons from the Uber Fine

Uber’s record GDPR fine highlights the importance of transparency, human oversight and effective safeguards in automated decision-making

Prof. Martin Zahariev, PhD

EU AI Omnibus: A Practical Implementation Roadmap for Businesses

What businesses should do now

Prof. Martin Zahariev, PhD

September 1, 2026

Why Bulgaria may be one of the smartest routes into the EU crypto market

With the end of MiCA’s transitional period, Bulgaria is emerging as an attractive gateway to the EU crypto market by offering a clear regulatory framework, competitive tax and operating conditions, and a MiCA license that enables CASPs to passport their services across the entire European Economic Area

August 25, 2026

Crypto is no longer invisible to the tax authorities

DAC8 makes crypto transactions more transparent to EU tax authorities, requiring crypto service providers to report client transaction data while not introducing new tax obligations for crypto holders.

Ivan Alexander Manev

Bulgaria strengthens AML governance requirements for banks

The latest amendments to the Credit Institutions Act introduce important changes to the regulatory framework for banks, further integrating anti-money laundering and counter-terrorist financing requirements into prudential supervision

Tsvetelina Koleva

Working from home in Bulgaria: Permanent establishments in the age of remote work

The rise of remote and hybrid work has blurred not just the boundary between professional and personal life, but also the tax boundaries between countries. For foreign companies a deceptively simple arrangement such as a person at a laptop in a Sofia apartment, can have significant corporate tax consequences. With this article we would like to offer a brief overview of the issue, how Bulgarian tax authorities currently approach it, and where the law is heading.

Ivan Alexander Manev

February 26, 2018

Martin Zahariev, PHD, presented GDPR at a workshop under a European project

Martin Zahariev, PhD delivered a presentation at a workshop on privacy and education in the context of the so called “once-only” principle.

January 7, 2020

Desislava Krusteva gains recognition in the Women in Data 2019 survey

Global Data Review – the leading information source within the data law landscape – has recently released its new survey Women in Data 2019.

© All rights reserved 2007-2026 Dimitrov, Petrov & Co.

Design by StanVision