![](https://www.avramova.lawyer/images/20240514.РЕШЕНИЕ.ППН-01-604-2023.jpg)
At the request of Adv. Raina Avramova meetings of the HIGHER ADVOCATE COUNCIL /VAdvS/ in connection with the application of the LAW ON THE PROTECTION OF PERSONAL DATA, the COMMISSION FOR THE PROTECTION OF PERSONAL DATA /KZLD/ in its reasons in Decision No. PPN-01-604/2023/ dated 14.05.2024. has accepted that the processing of personal data by the VAdvS was carried out in violation of the principles of legality, good faith and transparency under Article 5. $1, b. "a" of Regulation 2016/679, insofar as the distribution of information about the EGN identifier is in principle prohibited on the basis of Art. 25g, para. 1 of the Personal Data Protection Act, and its disclosure through publication to a potentially unlimited circle of third parties, without preventive or suspensive measures being taken, is in bad faith and non-transparent in relation to the data subject. The VAdVS is the controller of personal data within the meaning of Art. 4, 7) of the Regulation - a legal entity based on Art. 118 of the Law on the Bar, which independently determines the purposes and means of processing. On the basis of Art. 58, $ 2, "d" of Regulation 2016/697, the personal data administrator VAdVS is ordered to bring the rules for the protection of personal data in line with the provisions of the regulation, introducing clear and specific duties of the official on data protection in connection with personal data processing activities when publishing information on the website https://www.vas.bg. A property sanction of BGN 5,000 was also imposed.