Makes employment decisions, in Bulgaria

Regulation (EU) 2016/679, Arts. 13(2)(f), 14(2)(g), 15(1)(h) and 22; Zakon za zashtita na lichnite danni, Art. 37a · Read the law's page

• Give a person in Bulgaria a path to obtain human intervention, express their view, and contest a decision made solely by automated processing that produces a legal or similarly significant effect on them.
• You may refuse to give effect to this right in Bulgaria where doing so would endanger an interest Article 37a lists, such as the rights and freedoms of others or the enforcement of a civil-law claim, under Personal Data Protection Act Article 37a.
• Do not subject a person in Bulgaria to a decision based solely on automated processing, including profiling, that produces legal effects concerning them or similarly significantly affects them, unless the decision is necessary for entering into or performing a contract with them, is authorised by Union or Member State law that also lays down suitable measures to safeguard their rights, or rests on their explicit consent, under GDPR Article 22(1) and (2).
• Do not base a solely automated decision with legal or similarly significant effects on a person in Bulgaria on the special categories of personal data in GDPR Article 9(1), unless they gave explicit consent or the processing is necessary for reasons of substantial public interest on the basis of proportionate Union or Member State law, and suitable measures to safeguard their rights are in place, under GDPR Article 22(4).
• If you make solely automated decisions about a person in Bulgaria of the kind GDPR Article 22(1) and (4) describe, including profiling, tell them so and give them meaningful information about the logic involved and the significance and envisaged consequences for them: when you collect their data, within the Article 14(3) period where you obtained it from someone else, and in answering their access request, under GDPR Articles 13(2)(f), 14(2)(g) and 15(1)(h).

Regulation (EU) 2024/1689, Arts. 5, 50 — directly applicable in Bulgaria as EU Member State

• Do not place on the market, put into service, or use an AI system for social scoring.
• Do not place on the market, put into service, or use an AI system that exploits individuals' vulnerabilities.
• Do not conduct real-time remote biometric identification for law enforcement purposes, which is prohibited in most circumstances.when it serves a public body
• Tell users at the start of an interaction that they are communicating with an AI chatbot or voice agent.
• Mark artificially generated images, video, audio, and text with a machine-readable marker identifying them as artificial.

Draft legislation, proposed by 'Da, Bulgaria' party, Bulgarian National Assembly, late 2025 — not yet enacted as of August 2026