Personal data protection

The Law Office has a dedicated team of lawyers holding a high expertise and diverse experience in personal data protection field.

Among the services, offered in connection with personal data protection, are:

• Conducting training sessions, tailored to Client’s needs;
• Implementation of Data Protection Officer functions;
• Comprehensive legal analysis of the main processes when processing personal data within the Client, related procedures and required documents preparation. Conclusion-making in terms of processes and documents lawfulness as well as preparing recommendations for their design/ revision in accordance with the legal requirements.
• Preparation or modification of documents in compliance with personal data protection requirements, including:
  • amendments to contracts, general terms and conditions, forms and procedures;
  • internal rules, security policies and confidentiality;
  • consent to personal data processing;
  • activity record in terms of personal data processing;
  • violation record, together with a notification procedure for  information exchange with the control body in case of registered data breach;
  • procedures for implementing the data protection officer’s role- powers, responsibilities, interaction.
• Legal assistance in implementing the necessary measures, including the conduction of an impact assessment on personal data protection.

Thanks to the partnership with leading information security technology companies, our team serves public and private corporate clients, operating in various economic sectors.

Part of them happens to be experts, having been certified by IAPP (International Association of Privacy Professionals) certified with CIPP – Certified Information Privacy Professional.

Among the companies that have trusted our Law Office to perform the Data Protection Officer function or to support the performance of this function are:

• A multinational marketing research company;
• A leading furniture and household goods company;
• Water and sewerage operators;
• Hotels.

Among the companies, which have selected Popov, Arnaudov and Partners Law Office as a consultant through the process of full implementation of General Data Protection Regulation (GDPR) requirements, incl. trainings, are:

• Medical institutions;
• Water and sewerage operators;
• Companies, operating in consumer crediting field;
• Multinational companies, operating in services field;
• Multinational companies, operating in commerce.