Data Protection Officer
External DPO under Articles 37–39 GDPR: compliance monitoring, staff training and liaison with the Bulgarian Commission for Personal Data Protection.
External DPO & compliance consultant
GDPR data protection, AI governance, corporate governance and regulatory compliance. Practical solutions for business, provided under individual civil or consulting agreements.
Who I am
How I help
Engage me for a single service or for ongoing support across several areas at once.
External DPO under Articles 37–39 GDPR: compliance monitoring, staff training and liaison with the Bulgarian Commission for Personal Data Protection.
Records of processing activities, data protection impact assessments (DPIA), privacy policies and data breach response.
Compliance with the EU AI Act: inventory of AI systems in use, risk classification and internal rules.
Analysis of the requirements that apply to your business and a plan to bring your processes in line with them.
Codes of conduct, internal whistleblowing channels and investigation procedures aligned with current legislation.
Identifying, assessing and prioritising legal and operational risks, with clear measures to mitigate them.
Review of customer and supplier contracts, data processing agreements and monitoring of contractual obligations.
Internal rules, allocation of responsibilities and decision-making structures that bring transparency and control.
Independent audits and opinions on your compliance status, with concrete recommendations and timelines.
Services are provided to several companies at the same time, under individual civil contracts or consulting agreements.
My promise
I stand up for your organisation's interests before regulators, partners and customers.
I work with you directly and learn your processes instead of handing over template documents.
Recommendations your team can put into practice right away, without unnecessary bureaucracy.
Meet Boryana
Data Protection Officer · Compliance Consultant
I have many years of experience in data protection and regulatory compliance. I work with companies that want to comply with regulation without it holding their business back. I act as an external DPO and help with data protection, AI adoption, risk management and corporate rules.
Every client gets personal commitment, quick access and clear answers.
LinkedIn profileContact
Call or send an email to discuss what your organisation needs.