A useful conversation starts with your processes, not a ready-made document pack. Prepare the following information before the first meeting.
DPA · Practical guide · 27 October 2026
01
Describe your processing
What data do you use, for which purposes and for how many people? Include employees, customers, suppliers, CCTV and online services.
02
Clarify the role
Check whether designation is mandatory. Establish access to information and senior management, and how conflicts of interest will be avoided.
03
Agree how work will happen
Identify internal contacts, communication channels, escalation and reporting frequency. Discuss incident response and who makes decisions.
04
Compare scope, not promises
A one-off audit gives a snapshot. An external DPO has an ongoing advisory and monitoring role. Choose based on your needs without expecting a compliance guarantee.
Related guidance
Legal framework: Regulation (EU) 2016/679 (GDPR), Articles 5–6, 28, 32, 35–39 and Chapter V.
Data protection in Bulgaria — knowledge base ↗