Navigating the Practical and Institutional Implications of the Amended Cybersecurity Act and NIS2 Directive

DGKV and AmCham Host Compliance Briefing on Bulgaria’s Updated Cybersecurity Framework

On March 12, 2026, DGKV in partnership with the American Chamber of Commerce in Bulgaria, hosted a compliance briefing titled “Bulgaria’s Transposition of the NIS2 Directive: What the Amended Cybersecurity Act Means for Your Organization.”

Held at the American Corner at Sofia City Library, the event brought together institutional representatives, legal professionals, and cybersecurity industry leaders to discuss the practical implications of Bulgaria’s amended Cybersecurity Act and the NIS2 Directive.

The initiative was proposed by Georgi Sulev, Senior Associate at DGKV, as part of the firm’s efforts to support the business community in navigating emerging regulatory developments in cybersecurity and digital resilience.

Opening remarks were delivered by Ivan Mihailov, CEO of AmCham Bulgaria, and Georgi Sharkov, Caretaker Minister of e-Government, who emphasized cooperation between institutions, businesses, and technology providers in strengthening cybersecurity resilience across the economy.

Legal & Regulatory Panel

The first session focused on the legal and institutional framework introduced by the recent amendments to Bulgaria’s Cybersecurity Act.

Georgi Sulev delivered a presentation titled “Practical Application of the Amendments to the Cybersecurity Act”, outlining key legislative developments and their practical implications for businesses operating in Bulgaria. Key topics included:

  • The main legislative changes introduced by the Cybersecurity Act amendments
  • Expanded sectoral coverage and affected entities
  • Legal standards for organizations subject to cybersecurity obligations
  • Importance of effective cooperation between technical and legal teams in implementing compliance frameworks
  • Broader governance, risk management, and operational implications of the new regulatory requirements

The presentation also highlighted the need for compliance gap analysis, existing and anticipated secondary legislation defining minimum cybersecurity measures, and preparation for next steps by competent supervisory authorities.

Institutional perspectives were shared by:

  • Georgi Sharkov, Caretaker Minister of e-Government
  • Biserka Radeva, Head of Department “Cybersecurity Analysis and Research,” Ministry of Electronic Governance
  • Vladimir Dimitrov, Chief Commissioner and Director of the Cybercrime Directorate, General Directorate for Combating Organized Crime

Moderated by Omourtag Petkov, Partner at DGKV, the panel concluded with a Q&A session, which sparked a very fruitful discussion on compliance planning, designation of competent authorities, sectoral incident response readiness, emerging cyber threats, and the growing role of AI in cybersecurity.

Technical Panel: Compliance from a Business Perspective

The second panel explored the operational and technological aspects of cybersecurity compliance. Panelists Violeta Toteva (ARS Bulgaria EOOD), Simeon Kartselyanski (Information Services JSC) and Plamen Zhechev (Cisco Systems Bulgaria) shared insights on risk management, governance structures, and integrating technical and regulatory requirements into corporate operations.

The session was moderated by Anna-Marie Vilamovska, Business Development Manager at Hewlett Packard Enterprise.

The briefing provided a comprehensive view of Bulgaria’s cybersecurity regulatory landscape, highlighting the need for proactive compliance, strengthened governance, and incident response readiness in a rapidly evolving cyber threat environment. Discussions emphasized collaboration between institutions, technology providers, and businesses, as well as AI’s growing role in cybersecurity. DGKV continues to support organizations in navigating regulatory developments, helping clients align operational practices with legal obligations and enhance digital resilience both in Bulgaria and across the EU.

Further perspectives on the discussion are available in the Amcham Event ReviewGovernment Representatives And Industry Experts Gathered to Discuss The NIS-2 Directive - AmCham Bulgaria, by AmCham Bulgaria, as well as in the announcement published by the Ministry of Electronic Governance: Новини - Министерство на електронното управление.