Cyber Resilience Act Compliance in Bulgaria
The CRA establishes cybersecurity requirements for products with digital elements sold in the EU. Manufacturers must ensure security by design and provide vulnerability handling.
How does CRA apply in Bulgaria?
CRA applies in Bulgaria under EU law with the same obligations as across the bloc โ maximum fine โฌ15M or 2.5% of global turnover. The national supervisory authority is the CPDP (Commission for Personal Data Protection), which handles enforcement, complaints, and notifications. Deadline: December 11, 2027.
- Supervisory authority: CPDP (Commission for Personal Data Protection)
- Maximum fine: โฌ15M or 2.5% of global turnover
- Key deadline: December 11, 2027
| Supervisory authority | CPDP (Commission for Personal Data Protection) |
| Maximum fine | โฌ15M or 2.5% of global turnover |
| Key deadline | December 11, 2027 |
| Sectors affected | Software, IoT |
December 11, 2027
โฌ15M or 2.5% of global turnover
Software, IoT, Hardware
Key CRA Obligations for Bulgaria Businesses
- Implement security by design
- Provide security updates for product lifetime
- Report actively exploited vulnerabilities
- Maintain technical documentation
- Conduct conformity assessment
Does CRA apply to your Bulgaria business?
Find out in 2 minutes with our free regulation checker.
Check now โ freeCRA in Other Countries
Germany
๐ซ๐ทFrance
๐ณ๐ฑNetherlands
๐ช๐ธSpain
๐ฎ๐นItaly
๐ฆ๐นAustria
๐ง๐ชBelgium
๐ต๐ฑPoland
๐ธ๐ชSweden
๐ฎ๐ชIreland
๐ต๐นPortugal
๐ฉ๐ฐDenmark
๐ซ๐ฎFinland
๐จ๐ฟCzech Republic
๐ท๐ดRomania
๐ญ๐บHungary
๐ธ๐ฐSlovakia
๐ญ๐ทCroatia
๐ฌ๐ทGreece
๐ฑ๐บLuxembourg
๐ช๐ชEstonia
๐ฑ๐ปLatvia
๐ฑ๐นLithuania
๐ธ๐ฎSlovenia
๐ฒ๐นMalta
For informational purposes only. This is not legal advice โ consult qualified legal counsel.