One year after GDPR implementation, this article provides a description of the current position in Bulgaria by Violetta Kunze and Ralitsa Gougleva.