What are the key CSRD requirements in Bulgaria?

In Bulgaria, CSRD compliance requires understanding local enforcement by CPDP (Commission for Personal Data Protection). Organisations must follow EU-wide obligations adapted for local supervisory authority guidance.

🇧🇬България

Corporate Sustainability Reporting Directive Compliance in Bulgaria

CSRD expands mandatory sustainability reporting to large companies and listed SMEs. Companies must report according to European Sustainability Reporting Standards (ESRS) covering environment, social, and governance matters.

How does CSRD apply in Bulgaria?

CSRD applies in Bulgaria under EU law with the same obligations as across the bloc — maximum fine Per member state (audit-based enforcement). The national supervisory authority is the CPDP (Commission for Personal Data Protection), which handles enforcement, complaints, and notifications. Deadline: Phased: large PIEs from FY2024; other large undertakings from FY2025 (Omnibus deferral may apply); listed SMEs from FY2026 (Omnibus deferral likely — verify current dates).

Supervisory authority: CPDP (Commission for Personal Data Protection)
Maximum fine: Per member state (audit-based enforcement)
Key deadline: Phased: large PIEs from FY2024; other large undertakings from FY2025 (Omnibus deferral may apply); listed SMEs from FY2026 (Omnibus deferral likely — verify current dates)

Supervisory authority	CPDP (Commission for Personal Data Protection)
Maximum fine	Per member state (audit-based enforcement)
Key deadline	Phased: large PIEs from FY2024; other large undertakings from FY2025 (Omnibus deferral may apply); listed SMEs from FY2026 (Omnibus deferral likely — verify current dates)
Sectors affected	Large Companies (250+ employees or €40M+ revenue), Listed SMEs

Source: CPDP (Commission for Personal Data Protection)Reviewed: 2026-05-11

Deadline

Phased: large PIEs from FY2024; other large undertakings from FY2025 (Omnibus deferral may apply); listed SMEs from FY2026 (Omnibus deferral likely — verify current dates)

Max Fine

Per member state (audit-based enforcement)

Sectors Affected

Large Companies (250+ employees or €40M+ revenue), Listed SMEs, Financial Services