Disclosing customer data may be avoided by providing standard contracts and aggregate data in the form of analytics tables etc.

The European Commission's report on the e-commerce sector released in May (the Report) outlines the main trends and potential competition barriers in the online retail.

Should a contemplated transaction satisfy the criteria discussed at Part 1, the mandatory merger control would apply and the responsible party or parties must file a notification with the CPC.

When you consider an investment in Bulgaria or exiting an existing investment (either an entity, a business as a going concern or a part of it, or an income generating asset) you would diligently check...

The DPO is not personally liable for ensuring compliance with the data protection rules within a company.

In Part 1 we discussed the criteria for the applicability of the merger control and in Part 2 the procedure and the relevant practice of the Bulgarian competition authority.

Before the GDPR enters into force on 25 May 2018, companies processing personal data will have to reassess their approach to personal data processing.

On its entry into force, the GDPR would make reliance on data subjects'

A freely given consent means that the data subject has genuine or free choice to either agree or disagree to having his or her personal data processed.

The newly revised EU legal framework in the field of personal data protection (GDPR) has already made the processing of personal data an increasingly important topic for businesses operating...

One of the EU's key objectives in adopting the General Data Protection Regulation