The concept of personal data protection is to set up legislative, organizational and technological measures that safeguard individuals’ right to privacy with regard to the processing of their personal data. Namely, these principles have been embodied in current European legislation and in self-regulation policies. Thus, by imposing legal obligations on data controllers and granting rights to data subjects, the idea of personal data protection is aiming to ensure secure and just environment for the exchange of personal information.

In the field of personal data protection the Law and Internet Foundation team members have distinguished themselves with significant experience and knowledge of problems of protection, processing and transferring of personal data of third parties, development and preservation of international centralized databases, disclosure of personal data to competent state offices by necessity for the purposes of the criminal investigations and accusations; registration of data controllers, etc.

Different state administrations (ministries, agencies and commissions) confide in the knowledge and long-term practice of Law and Internet Foundation in the area of personal data protection. Its experts are frequently invited to participate in developing national legislation on these matters. They are lecturers of multiple international conferences, forums and seminars in the field of personal data protection, including trainings of state officers from the agencies, responsible for personal data protection and relevant departments in the state administration.

One of the leading Law and Internet Foundation experts is a member of the prestigious European Privacy Institute.

In 2007 Law and Internet Foundation developed the very first seminar on the implementation of the European legislation, regarding personal data protection in Bulgaria and the European practices in the field. Among the participants were some of the most popular European experts.

In 2010, being a project partner, the team of Law and Internet Foundation started the implementation of the project ‘Consumer Sentiment Regarding Privacy on User Generated Content (UGC) Services in the Digital Economy’ (CONSENT) that seeks to examine how consumer behaviour and commercial practices are changing the role of consent in processing personal data. CONSENT will advance the knowledge base that underpins the formulation and implementation of policies and corporate procedures in the area of privacy and consumer protection, with a view to informing policy-making in the European Union and contributing to the development of European research communities in these areas. The project is being developed with the financial support of European Commission under the Seventh Framework Programme.

The project ‘Scalable Measures for Automated Recognition Technologies’ (SMART) started in 2011, combining a technical review of key application with a review of existing pertinent legislation with the aim to analyze the smart surveillance technologies, including border control, crowd-control, counter-terrorism and e-government. The project moves on to create a tool-kit, which would be useful to system designers, policy makers and legislative draftsmen across Europe. At this stage, the project would aid bringing significant EU-wide expertise in data protection legislation, in order to prepare a draft model law, which would contain a number of measures providing adequate safeguards for the data subject and thus, rendering use of smart surveillance compliant with CFD 2008/977/JHA and other applicable regulations. Law and Internet Foundation team participates as a coordinator of Work Package "Smart Surveillance in Key Area of Application 4 – e-Government".