Regulation on Sharing of Confidential Information Published

In June, the Banking Regulation and Supervision Authority published the Regulation on Sharing of Confidential Information.

Personal Data through Video Devices

Following the recent Guidelines 3/2019 on processing of personal data through video devices issued by the European Data Protection Board (EDPB), the Hellenic Data Protection Authority (HDPA) issued the Guidelines attached hereto on how data controllers should inform data subjects of the processing of their personal data through CCTV systems according to the GDPR.

Bulgarian List of Processing Operations Requiring Data Protection Impact Assessment

The Bulgarian Commission on Personal Data Protection adopted a list of processing operations for which it would be mandatory for controllers to conduct data protection impact assessments. The controllers whose main or only place of establishment is on the territory of the Republic of Bulgaria will be required to conduct a data protection impact assessment in all cases when a specific processing is likely to result in a high risk to the rights and freedoms of the individuals.


The Personal Data Protection Agency of Bosnia and Herzegovina Prohibits Processing of Personal Data of Coronavirus Positive Persons

The Personal Data Protection Agency of Bosnia and Herzegovina issued a Decision prohibiting processing of personal data of persons that are Coronavirus positive and persons subject to self-isolation measures.