After the Bulgarian Parliament adopted a national law implementing the GDPR on 24 January, the Bulgarian president vetoed the legislation due to concerns regarding ‘the regulated data processing for journalistic purposes and the purposes of academic, artistic or literary expression’. As reported by Novinite, President Radev stated that the necessary balance has not been achieved, and the 10-criterion provision is excessive and unbalanced.
Privacy and data protection are two interrelated Internet governance issues. Data protection is a legal mechanism that ensures privacy. Privacy is usually defined as the right of any citizen to control their own personal information and to decide about it (to disclose information or not). Privacy is a fundamental human right. It is recognised in the Universal Declaration of Human Rights, the International Covenant on Civil and Political Rights, and in many other international and regional human rights conventions. The July 2015 appointment of the first UN Special Rapporteur on the Right to Privacy in the Digital Age reflects the rising importance of privacy in global digital policy, and the recognition of the need to address privacy rights issues the the global, as well as national levels.