Functional Review of the systems for collecting, processing, and storing of personal information

The functional review of the systems for collecting, processing, and storing of personal information was conducted in connection with the planning of the application of the developed project of a personal information and financial resources defense act, necessary for its enactment. The review, which encompassed all administrative bodies of the executive, legislative and judicial powers, for the first time in Bulgarian practice, included private legal entities - hospitals, health insurance, pension funds, insurance, banking, labour relations - personal files of employees etc. During the review information about the present databases administrated by bodies of state power and private legal entities, and about the procedures of collecting, processing and storing was gathered as well as about the organization of this activity. The first part of the functional review ended in the collection and processing of the information - on that basis were planned the financial and human resources, needed for the enforcement of the act.  The second part of the functional review has not ended yet, because the enactment of the proposed act was postponed for the new Parliament. After its final enactment a detailed schedule with suggestions tailoring the existing databases to the decrees of the act will be made.

The issue of personal data protection is not very popular among the Bulgarian society. Therefore, it is necessary that a relevant protection of citizens’ interest be ensured through building of knowledge and experience in the expert communities and citizens’ organizations. Moreover, the efficient enforcement of the Law on Personal Data Protection is tightly connected to the informing of the citizens on their rights and possibilities ensured by the Law. Subjects of the personal data protection should be enabled to obtain sufficient advice and consultations, as well as to receive compensation in case of violation of their rights. The main objective of the Project was the raise of citizens’ awareness of their rights and obligations provided by the Law on Personal Data Protection, as well as the obligations of the administrators of personal data with regard to the protection of the integrity of these data.

Main project activities:

  • Functional review of the systems for collecting, processing, and storing of personal information
  • Proposals for improvement of the legal framework;
  • Determination of the public and practical importance of the legislation on protection of personal data as well as the requirements it establishes with regard to the internal and external conditions existing in the country – political, economic, social and technological;
  • Review and translation of the basic EU documents dealing with the personal data protection matters and the law enforcement in the field;
  • Planning of the activities on delivery of information within the public society, determined according to the needs declared by the citizens as well as the European practices.

Client / Beneficiary:
Council of Ministers of the Republic of Bulgaria, NGO’s, and Private companies

Duration of the project:
The Functional review – 7 months [June 2001 – December 2001];
Raising the citizens’ awareness – 10 months [September 2003 – June 2004]