Duty LXD-1277
Processes biometric data, in Bulgaria
Each law's tag says when it binds: since in force proposed proposed
GDPR Article 9 and PDPA Employment and National-ID-Number Rulessince 2 lines
Regulation (EU) 2016/679, Art. 9; PDPA (ЗЗЛД), employment and ЕГН provisions · Read the law's page
- Obtain an explicit GDPR Article 9(2) legal basis before processing biometric, health, or other special-category personal data of a person in Bulgaria.
- Do not let the Bulgarian national identification number (ЕГН) be the only means of identifying a user of a remote electronic service, and do not allow free public access to information containing it unless a law provides otherwise.
EU Artificial Intelligence Act — Articles 5 and 50 (Prohibited Practices; Bot and Synthetic-Content Disclosure)since 5 lines
Regulation (EU) 2024/1689, Arts. 5, 50 — directly applicable in Bulgaria as EU Member State
- Do not place on the market, put into service, or use an AI system for social scoring.
- Do not place on the market, put into service, or use an AI system that exploits individuals' vulnerabilities.
- Do not conduct real-time remote biometric identification for law enforcement purposes, which is prohibited in most circumstances.when it serves a public body
- Tell users at the start of an interaction that they are communicating with an AI chatbot or voice agent.
- Mark artificially generated images, video, audio, and text with a machine-readable marker identifying them as artificial.
Законопроект за използването и развитието на изкуствения интелект (Bill on the Use and Development of Artificial Intelligence), No. 52-654-01-151proposed6 lines
Bill No. 52-654-01-151 of (Законопроект № 52-654-01-151), Fifty-Second National Assembly, Закон за използването и развитието на изкуствения интелект · Read the law's page
- This is a bill, not law: it was filed in the National Assembly on and has not been enacted. Read the lines below as what would apply if it is enacted as filed.
- Do not use remote biometric identification systems, and do not engage in the AI practices that Article 5 of Regulation (EU) 2024/1689 prohibits (Article 12(1), points 1 and 3).
- Do not publish on an online platform AI-generated content that is a convincing forgery in the name of a person in high public office or a state body, or in the name of another person where that person has not consented in advance (Article 15(1)).
- If a recommender system you operate is identified as high-risk for national security by the Council of Ministers, give the State Agency for National Security and the Ministry of Innovation and Digital Transformation without delay its source code and technical documentation, a description of its training data, its main model parameters and statistics on its results (Article 13(2)).
- Do not use children's personal data to train an AI model unless their parents or guardians consent and the model is a specialized one for children's education or pediatric innovation (Article 32).
- If you provide, import or distribute AI systems in Bulgaria, give a current telephone number when you register in the Commercial Register and hold a profile in the secure electronic delivery system (Article 11).