The General Data Protection Regulation (EU) 2016/679 applies directly in all EU member states including Bulgaria. YARD Law Co. helps businesses of all sizes understand and implement their obligations - practically and proportionately.
GDPR applies to any company processing personal data, regardless of size, if it is established in the EU or if - even from outside the EU - it offers goods or services to persons in the EU or monitors their behaviour. Small firms, online shops, startups, and consulting practices all fall within its scope.
Many businesses believe the exemption for companies with under 250 employees removes their GDPR obligations. This is incorrect. The exemption does not apply when processing is regular or systematic, involves special categories of data, or poses risks to individual rights. In practice, most businesses cannot rely on this exemption.