Status regarding Budapest Convention
Status : Party Declarations and reservations : reservations regarding Article 14; and declarations regarding Article 27 and Article 35.SEE LEGAL PROFILE See legal profileCybercrime policies/strategies
The Council of Ministers of the Republic of Bulgaria adopted the National Cyber Security Strategy Cyber Resilient Bulgaria 2020 on 13 July 2016.
The strategy sets out 9 objectives:
Obj 1 - Establish and develop the national system for cyber security and resilience
Obj 2 - Ensure Network and Information Security as the foundation of cyber resilience
Obj 3 - Support protection and sustainability of digitally dependent critical infrastructures
Obj 4 - Improve the interaction and information sharing between state, business and society
Obj 5 - Develop and improve the regulatory framework
Obj 6 - Step up the fight against cyber crime
Obj 7 - Lead cyber defense and protection of national security
Obj 8 - Raise awareness, knowledge and competencies and develop a stimulating environment for research and innovation in the field of cyber security
OB 9 - International interaction - cyber diplomacy and Interoperability
(Source: https://www.cyberwiser.eu/bulgaria-bg)
On 31 October 2018, the Bulgarian parliament passed the Cyber Security Act after a second reading, implementing EU Directive 2016/1148 ('NIS' Directive).
Cybercrime legislation
State of cybercrime legislation
Bulgaria ratified the Budapest Convention in 2005. Cybercrime related legislation has been enacted in national legislation through the Criminal Code and the Criminal Procedure Code.
Substantive law
The Criminal Code of Bulgaria provides an exhaustive substantive law framework, addressing all offences provided by the Budapest Convention.
The Criminal Code criminalises the following offences:
Article 319a - Illegal access to a computer system
Articles 171, 319d - Illegal interception
Articles 171a, 212a, 319b, 319c - Data interference
Articles 319b, 319c - System interference
Articles 319e, 319d, 348a, 216 - Misuse of Device
Articles 212a, 319b - Computer-related forgery
Article 212a - Computer-related fraud
Article 159 - Offences related to child pornography
Articles 172a, 172b, 173, 174 - Offences related to infringements of copyright and related rights
Procedural law
In terms of procedural powers, the Criminal Procedure Code provides all relevant procedural powers also found in the Convention, with exception of real-time collection of traffic data and interception provided under the Electronic Communications Act.
Criminal Procedure Code:
Pre-trial bodies may use the following special intelligence means:
- technical means - electronic and mechanical devices and substances that serve to document operations of the controlled persons and sites;
- operational techniques - observation, interception, shadowing, penetration, marking and verification of correspondence and computerised information, controlled delivery, trusted transaction and investigation through an officer under cover.
Other measures:
Article 159 - Obligation to hand over objects, papers, computerised data, data about subscribers to computer information service and traffic data
Article 160, 163 - search and seizure
Article 165 - Interception and seizure of correspondence
Access of computer data (Electronic Communications Act - Article 215b)
Safeguards
General rules and safeguards apply.
The Constitution of Bulgaria in Chapter Two guarantees a series of fundamental human rights and freedoms, among which:
Article 30. Everyone shall have the right to liberty and inviolability of person.
Article 32. The privacy of citizens shall be inviolable.
Article 33. The home shall be inviolable.
Article 34. The freedom and confidentiality of correspondence
Article 41. Everyone has the right to seek, receive, and disseminate information.
The above-mentioned constitutional principles are reflected in the criminal legislation, including the Criminal Procedure Code, the Criminal Code, and the Electronic Communications Act.
Related laws and regulations
Electronic Document and Electronic Signature Act
Law On Protection Of Personal Data
Specialised institutions
General Directorate Combating Organized Crime - Cybercrime Unit, within Ministry of Interior, also hosts the 24/7 National Contact Point for High-tech Crimes - www.gdbop.bg, www.cybercrime.bg
Commission for Personal Data Protection - www.cpdp.bg/en
Commission for Communications Regulation - http://www.crc.bg/index.php?lang=en
CERT Bulgaria (English), https://govcert.bg/en/welcome- National Computer Security Incidents Response Team.
International cooperation
Competent authorities and channels
Authority for extradition and provisional arrest in the absence of other treaties
Ministry of Justice - (extradition),
Supreme Cassation Prosecutor’s Office - (provisional arrests)
Authority for Mutual Legal Assistance in the absence of other agreements or arrangements (Article 27)
Ministry of Justice - (trial stage),
Supreme Cassation Prosecutor’s Office - (pre-trial stage)
24/7 Contact point (Article 35)
General Directorate for Combating Organized Crime, Ministry of the Interior Transborder
Organized Crime Department
Practical guides, templates and best practices
Legislative framework:
Extradition And European Arrest Warrant Act - art. 36
Criminal Procedure Code - art. 471, 472, 473, 474, 475, 476, 477
Ministry of Interior Act - art. 161a, 161c, 161e
Electronic Communications Act - art. 251з
Jurisprudence/case law
Supreme Judicial Council - legalacts.justice.bg (in Bulgarian)
Sources and links
- Criminal Code
- Criminal Procedure Code
- Constitution
- Electronic Communications Act
- Electronic Document and Electronic Signature Act
- E-commerce Act
- CERT Bulgaria
- https://www.cyberwiser.eu/bulgaria-bg
- Bulgaria adopts new Cyber Security Act
- GENVAL - Evaluation report on the seventh round of mutual evaluations "The practical implementation and operation of European policies on prevention and combating Cybercrime" - Report on Bulgaria
- Other GENVAL 7th round evaluation reports
These profiles do not necessarily reflect official positions of the States covered or of the Council of Europe.
Are you aware of the latest legislative or policy developments on cybercrime and electronic evidence?
Share this information with us helping to keep this platform up to date.
- Cybercrime website
- Template: Mutual Legal Assistance Request for subscriber information (Art. 31 Budapest Convention). English and bilingual versions available.
- Template: Data Preservation Request (Articles 29 and 30 Budapest Convention). English and bilingual versions available.