Law note · Bulgaria

KZLD Enforcement and GDPR Article 82

cite Regulation (EU) 2016/679, Arts. 82-83 stage In effect since 2018-05-25 reviewed 2026-08-24

Комисия за защита на личните данни (KZLD, English: Commission for Personal Data Protection) is Bulgaria's supervisory authority; an Inspectorate with the Supreme Judicial Council holds a parallel, narrower oversight role whose exact scope was not established in this pass. General Data Protection Regulation (GDPR) Article 82 arms an individual with a direct private right of action.

Commentary describes a Bulgarian procedural avenue, a complaint to KZLD within 6 months of discovering a violation or a direct administrative court claim, mutually exclusive where Commission proceedings on the same matter are already pending; this is an administrative-enforcement and judicial-review structure rather than a distinct civil damages remedy beyond Article 82, and is recorded here as procedural rather than folded into the private-right-of-action finding's basis.

What it asks of an app

  • Expect KZLD to have General Data Protection Regulation (GDPR) Article 83 fining power over your processing of personal data of a person in Bulgaria.
  • Expect any person in Bulgaria who suffered material or non-material damage from an infringement to have a direct GDPR Article 82 right to compensation, pursued either through a KZLD complaint within 6 months or a direct administrative court claim.

When LexLint raises it

Declared activities: crawls_web, trains_models, deploys_chatbot, processes_biometrics, processes_voice

Primary source: GDPR Arts. 82-83
CMS and DLA Piper commentary (no primary text read)

← Back to the example  ·  Lint your app →