COMMISSION FOR PERSONAL DATA PROTECTION, BULGARIA Central Eastern Europe Data Protection Authorities (CEEDPA) 15 th Meeting, 10-12 th of April 2013, Belgrade

COMMISSION FOR PERSONAL DATA PROTECTION, BULGARIACentral Eastern Europe Data Protection Authorities (CEEDPA)

15th Meeting, 10-12th of April 2013, Belgrade

GOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITYGOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITY

GOOD PRACTICES OF THE BULGARIAN GOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITYDATA PROTECTION AUTHORITY

Prof. Veselin Tselkov, DSc – member of the BoardProf. Veselin Tselkov, DSc – member of the BoardMs Desislava Borisova - chief legal adviser Ms Desislava Borisova - chief legal adviser

1




Agenda

Introduction

Good practices

Conclusions

2




Introduction

„The sovereignty of the society, the region, the nation,

the state has their only sense if their real sovereignty

is based on the only real sovereignty - the sovereignty

of the human being.”

Vaclav Havel

3




The experience of the CPDP

Complaints

Inspections

Data controllers

Consultations

4




Strategic principles and priorities during the years

The raising of the awareness of the society

Training of the data controllers

Improving of the system for ensuring data protection

Strengthening of the administrative capacity of the

Commission for personal data protection

5




Good practices


The training for the data controllers

The methodology for inspections activity

Ordinance № 1 dated 30 January 2013 on the minimum level

of technical and organizational measures and the admissible

type of personal data protection

The new information technologies in the work of the CPDP

6





Continuous process of the raising of the awareness

7




Main problems

Lack of knowledge for the personal data protection problems

Lack of assessment of the importance of the problem and the

threats

Lack of knowledge of the legislative framework

Lack of knowledge of the consequences of the violation of the

rights

8




Targets for exerting an influence

Society

State authorities and local authorities

Private companies

9




The media

Use of media

o Electronic media

o Other media

10




The media

Not only is important for the media to be considered as a

corrective, but they also must be seen as a tool for

influencing the society and as a key tool of influencing

the society and contributing to the right functioning of

the data protection system.

11



GOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITYGOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITY12




The media

Internet

o Website of the CPDP

o Social networks

o Materials and banners in the most popular websites

o Links between the website of the CPDP and other

institutions:

State authoritiesState authorities

Industrial sectorIndustrial sector

Non-governmental organizationsNon-governmental organizations

13




Website of the CPDP

14




Website of the CPDP

15




10 years Commission for Personal Data Protection

16




The media

Internet

o Website of the CPDP

o Social networks

o Materials and banners in the most popular websites

o Links between the website of the CPDP and other

institutions:

State authoritiesState authorities

Industrial sectorIndustrial sector

Non-governmental organizationsNon-governmental organizations

17




The media

Information bulletin

o Contemporary trends

o Legislative amendments

o CPDP’s practices

18




The media

The informational brochures can be generally oriented or

oriented to stakeholders

19




The media

Informational brochures

o 10 years of the CPDP

o Your identity card

o Video surveillance

o Internet and children

o Advices for parents

o Your Schengen Information System’s rights

20




Your identity card

21




Your identity card

22




Video surveillance

23




Video surveillance

24




Internet and children

25




Internet and children

26




Advices for parents

27




Advices for parents

28




The media

Special postmark issued on the European Day for personal

data protection – 28th January

29




Special postmark issued on the European Day for personal data protection – 28th January

30




The other initiatives

Examples

o National children competition on pictures for Internet as a

point of view

o Joint and/or external meetings

o Doors open days

o Public lectures with the academic society

31




National children competition on pictures for Internet’s point of view – Katya 4

32




National children competition on pictures for Internet’s point of view – Mikaela 10

33




National children competition on pictures for Internet’s point of view – Elica 14

34





Joint and/or external meetings

o Formal meetings, plenary, workshops

With district governors, mayors, etc.With district governors, mayors, etc.

Thematic meetings with different authorities – Thematic meetings with different authorities –

Communications Regulation Commission, Commission Communications Regulation Commission, Commission

for consumer protectionfor consumer protection

o Open meetings

35





Joint and/or external meetings

o Press conferences with journalists

o Doors open days for citizens and data controllers

o Training

o Law enforcements issues on the application of the Law for

electronic communications ( discussions with stakeholders

in different places – prosecutors, judges, etc.)

36





Promotional information campaign with specific logo: „2012 -

10 years Commission for personal data protection –

28th January European data protection day” - leaflets,

notebooks, badges, placards, cups pens, calendars, as well as

flash memories with information about the data protection

o Magnetic cartridge

o Contents

37




Is the protection of personal data important ?

38

Важна; 27

Много важна; 69

Не е важна; 1 Нито е важна, нито не е важна; 1

Не знам, без отговор; 2




Training. Scope of the training

State authorities and local authorities

Business organizations

Targeted groups

Stakeholders

Personnel (staff)

39




Training. Common subjects

Topical issues of the data protection issues

Legal framework of the personal data protection in the

Republic of Bulgaria

Legal proceedings and supervision

Data controllers

40




Training. Specialized training

Education

Banking

Service sector

Hotels

Health sector

Schengen Information System

41




ORDINANCE № 1 dated 30 January 2013

On the minimum level of technical and organizational

measures and the admissible type of personal data

protection

42




ORDINANCE № 1 dated 30 January 2013

General provisions

o Confidentiality , integrity and availability

o Implementing the need-to-know principle

Types of protection

Impact assessments

Levels of impact

Obligations of the controller

43




Methodology for Inspection Activity

Methodology of how to carry out an inspection

On-going inspections based on a monthly plan of the CPDP

o Purpose

o Scope

o Cases

http://www.cpdp.bg/?p=news_view&aid=478

44




Plan for Inspections

45




Implementing New Information Technologies in the Work of CPDP

Call centre

Internet website

Information bulletin

Maintaining the Register of personal data controllers and the

personal data registers kept by them

Automated document management system

Automated paperless system for open meetings

46




Concusion

“We want to open new growth opportunities that Europe needs,

and at the same time, we want to make data protection an

effective right for everybody. We will deliver effective,

practicable and future proof data protection rules that enable

growth.”

Viviane Reding

47




Agenda

Introduction

Good practices

Conclusions

48




GOOD PRACTICES OF THE BULGARIAN GOOD PRACTICES OF THE BULGARIAN DATA PROTECTION AUTHORITYDATA PROTECTION AUTHORITY


49




QUESTIONS ?QUESTIONS ?

prof. Veselin Tselkov, DSc – member of the Boardprof. Veselin Tselkov, DSc – member of the BoardDesislava Borisova - chief legal adviser Desislava Borisova - chief legal adviser

50




QUESTIONS ?QUESTIONS ?


51

Documents

COMMISSION FOR PERSONAL DATA PROTECTION, BULGARIA Central Eastern Europe Data Protection Authorities (CEEDPA) 15 th Meeting, 10-12 th of April 2013, Belgrade