With technology and data in her heart, Desislava has 16 years of unmatched experience exclusively practicing in the legal areas of information technologies, privacy, and data protection.

Desislava Krusteva comments on the regulations on personal data and fiscal devices in ordinance N-18 *The publication is in Bulgarian

Global Data Review – the leading information source within the data law landscape – has recently released its new survey Women in Data 2019.

This year’s edition of the conference will focus on the opportunities that digital marketing offers to the market in medicinal products.

The guide is designed for private companies that try and want to use AI in their work or implement it, and that have cross-border customers

The newly-acquired certificate is the second one that IAPP has conferred on Ms. Krusteva.

The seminar was organized especially for the members of the Bulgarian Association for People Management.

More Dimitrov, Petrov & Co. (DPC) practices and lawyers than ever have been recognized in one of the most prestigious global legal rankings.

The dispute was heard before three successive instances.

Desislava Krusteva comments the proposition for introduction of new global digital tax

As a consequence of the new decision personal data can flow from the EU to US companies participating in the Framework without additional data protection safeguards.

Whistleblowers Protection Act (full name: Protection of Persons Who Report Breaches or Publicly Disclose Information on Breaches Act) (the Act) was adopted at second reading on the Parliament’s last working day and promulgated in the State Gazette.

DPC ranked in Chambers Europe 2021 for TMT, Competition/Antitrust, Intellectual Property, Tax, Employment, Dispute Resolution, and Real Estate.

Desislava Krusteva summarizes what are the legal and practical challenges to E-commerce related to the requirements for recording and reporting sales and the management softwares.

Desislava Krusteva gives answers to some questions every business owner should ask with regard to the imminent coming into force of the GDPR. *This publication is in Bulgarian.

We advocate for the creation of a regulatory environment where new technologies can thrive

On 04 June 2021 the European Commission issued two sets of standard contractual clauses (SCC) under the General Data Protection Regulation (GDPR): 1. SCC for the transfer of personal data to third countries (below “New Transfer SCC”); and 2. SCC between controllers and processors within EU (below “Controller-Processor SCC”).

Terms and conditions

Desislava Krusteva comments on the new existing mechanism for data transfer in the United States - the so-called EUU. S. Privacy Shield, adopted by the European Commission on July 12, 2016. The new agreement aims to regulate the exchange of data between data controllers in the European Union and in the United States of America (USA). *This publication is in Bulgarian.

Terms and conditions

Desislava Krusteva and Tsvetelina Paskova have contributed the Bulgarian part of the AI Regulations Guide - an initiative of World IT Lawyers covering 15, mostly European, jurisdictions. This guide is designed for private companies that try and want to use AI in their work or implement it, and that have cross-border customers. World IT Lawyers, whose member DPC has been for many years, believes that knowledge of the legislation of different countries, properly explained, structured and systematized, can contribute to correct and balanced decisions.

Desislava Krusteva authored the Bulgarian section of Global Data Localization Laws: Overview by Practical Law Data Privacy & Cybersecurity, which is providing an overview of global data localization laws that may require companies to physically store personal information or other data within a particular country, limit cross-border data transfers, or locally host some information technology infrastructure, including servers and other components. It provides general information and addresses key issues organizations must consider when collecting and processing personal information for employees, customers, or others in one or more countries with data localization laws.

The Regulation on digital operational resilience for the financial sector (DORA) entered into force on January 16, 2023, and forms an integral part of the European Commission's digital finance package, a package of measures to further enable and support the potential of digital finance in terms of innovation and competition, while mitigating the risks arising from it. DORA will become directly applicable in each Member State from January 17, 2025. In this article, Desislava Krusteva, Partner at Dimitrov, Petrov & Co., gives an overview of the interplay between DORA and the General Data Protection Regulation (GDPR).

The adoption of the near-final version of the AI legislative text was a long-awaited achievement of the European authorities in the first half of this year. However, the document is definitely not an easy read with its more than 400 pages, but knowledge of it is likely to become key to the success of any business that works in the field of information technology or benefits from the latest developments related to artificial intelligence. What rules the new regulation introduces, which AI systems will be affected, and when we can expect to feel its effects according to Desislava Krusteva, Partner at DPC and Head of the Data & Technology Practice. *This publication is in Bulgarian.

Desisalva Krusteva on the main obligations of data processors under the GDPR

Privacy Policy

Desisalava Krusteva provides a brief overview of the mandatory data protection measures that need to be observed under GDPR. * This publication is in Bulgarian.

С технологиите в сърцето си, Десислава притежава несравним 16-годишен опит, фокусиран в сферата на правото на информационните технологии и защита на личните данни.