by Yavor Markov - New Balkans Law Office

The General Data Protection Regulation (GDPR) transformed the data protection landscape by introducing extensive and detailed obligations on personal data controllers. These requirements reflect the level of risk associated with processing personal data, the number of individuals with access, the volume and sensitivity of the data involved, and related considerations. Given these nuanced criteria, determining the applicability of a specific requirement to a particular controller is not always straightforward. Nevertheless, achieving GDPR compliance is crucial, as non-compliance can result in substantial fines and reputational damage.