Protection is granted to those who report a breach
In May 2023 the Bulgarian law regarding whistleblowing has been aligned with the related EU legislation, by putting into force a local “Protection of Persons Who Report or Publicly Disclose Information on Breaches Act” (“Whistleblowing Act”) which transposes the requirements of Directive (EU) 2019/1937 of the European Parliament and of the Council of October 23, 2019 on the protection of persons who report breaches of Union law.
The Whistleblowing Act applies to reports or public disclosure of information on legislative breaches of various natures, among which breaches in the area of financial services, products, and markets, and prevention of money laundering and terrorist financing. According to the said legislative piece, the Commission for Personal Data Protection shall act as the central authority for external reporting and protection of the persons to whom such protection is granted. The Commission for Personal Data Protection shall promptly forward any whistleblowing reports and publicly disclosed information on breaches related to financial services, products, and markets, and prevention of money laundering and terrorist financing to the Financial Supervision Commission, the latter being the competent authority for the verification of such reports and information, taking relevant actions to prevent breaches or remedying the consequences thereof.
