01
OUR CORE SERVICE
External DPO
A consistent point of contact. An independent legal perspective. Support for the decisions you make every day.
Explore the serviceLAW. TECHNOLOGY. TRUST.
INDEPENDENT PERSPECTIVE / PRACTICAL SOLUTIONSPersonal data is
a matter of trust.
Give it a strong foundation.
External DPO services. DPO training. AI and personal data. Legal expertise for the decisions you make every day.
Discuss your projectDATA PROTECTION. LOOKING AHEAD.Services
01 / Services
Clarity in the rules. Confidence in your decisions.
Expert support for your team. Skills for your development. Clear rules for using AI.
02
PROFESSIONAL DEVELOPMENT
DPO training
Turn an understanding of the rules into practical capability.
Explore the courses03
TECHNOLOGY & RESPONSIBILITY
AI & data protection
Before a new tool becomes part of everyday work, understand what it does with data.
Explore the serviceGDPR consulting & audits
Impact assessments, policies and practical support.02 / FROM ANALYSIS TO PRACTICE
Compliance that works in everyday business.
We agree the scope, priorities and responsibilities before we begin. You receive practical documents and advice you can act on.
Understand the context
Your activities, data flows, suppliers and people. We establish what needs to be assessed.
Set the priorities
We identify gaps and agree a plan with actions, owners and a sensible sequence.
Work with your team
We prepare policies, advise on specific questions and follow up on agreed actions.
03 / THE PEOPLE BEHIND THE ADVICE
Legal perspective. Practical understanding.
Meet the people behind the advice and explore their areas of practice.
Attorney at law · Data protection and technology
Dr Ginka Todorova
Profile & expertise
Attorney at law · Partner · Mediator
Kristina Naydenova
Profile & expertiseHundreds
Hundreds of participants have completed our DPO courses and gone on to find work or use the learning as an additional professional qualification.
Ask about the next course ↗05 / PRACTICAL RESOURCES
Knowledge for your next decision.
KNOWLEDGE BASE / BULGARIA
Data protection in Bulgaria
GDPR, DPOs, individual rights, breaches and AI. A practical guide organised by topic.
Explore the knowledge base ↗PRACTICAL GUIDE
Before you choose an external DPO
Practical questions about scope, independence and the organisation of an external DPO service.
Read the guide ↗PRACTICAL GUIDE
What to ask your AI vendor
A starting checklist for reviewing an AI tool’s data practices, contracts and configuration.
Read the guide ↗FAQ
DPO, training and AI. Clear answers.
What is an external DPO service?
An external Data Protection Officer advises the organisation, monitors GDPR compliance and acts as a contact point for data protection matters. The service is provided under a contract with a clear scope and independence for the DPO.
Do you organise courses for external DPOs?
Yes. DPA organises training for future and practising external and internal Data Protection Officers, and for professionals seeking additional skills. Contact us for upcoming dates, the programme and format.
Does GDPR apply to artificial intelligence?
Yes, where AI processes personal data and the processing falls within GDPR’s scope. Examples include applicant documents, customer correspondence and call recordings. Lawful basis, transparency, security and individual rights must be assessed alongside applicable AI rules.
How should a business in Bulgaria approach AI and data protection?
List the AI tools you use and their purposes. Establish what data they receive, who processes it, where it is stored and who checks the output. DPA can help assess vendors and use cases, prepare internal policies and establish whether an impact assessment is required.
Let’s start with your question.
Tell us about your organisation, challenge or planned project. We will discuss an appropriate scope of work.
Discuss your project