On 19th July 2018, the Commission for Personal Data Protection / CPDP / received a signal against “BISOFT” LTD. regarding a possible violation of Regulation (EU 2016/679), for data security, expressed in unauthorized disclosure of personal data, before a third party - / SCC /, namely - personal data of lawyers, members of the Sofia Bar Association, being a personal data administrator, against which “BISOFT” LTD., is processing on the basis of a contract and joining the Supreme Cassation court / SCC /, to the software product "Official protections", module - "Instances", without the explicit consent of the administrator.
After the inspection, the CPDP found that for the allegation that the security was violated, by disclosing personal data to a third party, such as the SCC - no evidence was collected - no violation was found, given that the CPDP does not have to exercise its powers you are. You can see the document here: SIGNAL-SAK-KZLD, OPINION-KZLD-VKS-SAK
