Insights

News

Our latest thinking on the issues that matter most in business and management.

Critical PHP Vulnerabilities: What Are the Risks for Businesses and How Should You Respond?

On 21 October 2026, updates were released for two critical vulnerabilities in PHP - a technology widely used for websites, online stores, and business applications. The vulnerabilities may expose companies to the risk of unauthorized access to systems and data, including where the maintenance of the relevant services has been outsourced. This alert summarizes the specific steps companies should verify with their IT teams and the legal obligations that may arise if an incident is identified.

The EmpCo Directive: Stricter Rules on Green Claims

ESG in Bulgaria after the Omnibus: A Lighter Reporting Landscape

Crypto is no longer invisible to the tax authorities

Critical PHP Vulnerabilities: What Are the Risks for Businesses and How Should You Respond?

On 21 October 2026, updates were released for two critical vulnerabilities in PHP - a technology widely used for websites, online stores, and business applications. The vulnerabilities may expose companies to the risk of unauthorized access to systems and data, including where the maintenance of the relevant services has been outsourced. This alert summarizes the specific steps companies should verify with their IT teams and the legal obligations that may arise if an incident is identified.

Desislava Krusteva

The EmpCo Directive: Stricter Rules on Green Claims

From 27 September 2026, public sustainability claims will face clearer and more targeted legal scrutiny. This is particularly relevant for companies operating in Bulgaria

Ana-Mari Eremieva

ESG in Bulgaria after the Omnibus: A Lighter Reporting Landscape

Тhe Omnibus has reduced mandatory ESG reporting obligations for most Bulgarian companies and mandatory reporting is now unlikely to apply for them

Ana-Mari Eremieva

When Algorithms Decide Who Gets to Work: Key GDPR Lessons from the Uber Fine

Uber’s record GDPR fine highlights the importance of transparency, human oversight and effective safeguards in automated decision-making

Prof. Martin Zahariev, PhD

EU AI Omnibus: A Practical Implementation Roadmap for Businesses

What businesses should do now

Prof. Martin Zahariev, PhD

Why Bulgaria may be one of the smartest routes into the EU crypto market

With the end of MiCA’s transitional period, Bulgaria is emerging as an attractive gateway to the EU crypto market by offering a clear regulatory framework, competitive tax and operating conditions, and a MiCA license that enables CASPs to passport their services across the entire European Economic Area

Crypto is no longer invisible to the tax authorities

DAC8 makes crypto transactions more transparent to EU tax authorities, requiring crypto service providers to report client transaction data while not introducing new tax obligations for crypto holders.

Ivan Alexander Manev

Bulgaria strengthens AML governance requirements for banks

The latest amendments to the Credit Institutions Act introduce important changes to the regulatory framework for banks, further integrating anti-money laundering and counter-terrorist financing requirements into prudential supervision

Tsvetelina Koleva

Working from home in Bulgaria: Permanent establishments in the age of remote work

The rise of remote and hybrid work has blurred not just the boundary between professional and personal life, but also the tax boundaries between countries. For foreign companies a deceptively simple arrangement such as a person at a laptop in a Sofia apartment, can have significant corporate tax consequences. With this article we would like to offer a brief overview of the issue, how Bulgarian tax authorities currently approach it, and where the law is heading.

Ivan Alexander Manev

December 17, 2021

DPC named Firm of the Year - Bulgaria by Who’s Who Legal

This is the second time after 2019 that our team has received this high recognition.

December 14, 2021

DPC advised DHH on Evolink acquisition

А team of DPC M&A experts led by Zoya Todorova advised DHH S.p.A, an Italy-based company investing in hosting providers in Central and Eastern Europe, on the acquisition of the Bulgarian tech company Evolink AD.

December 3, 2021

What to look out for when establishing a right of use?

Can one get free lunch in case of an established right of use? The right of use has been known since Roman times. However, sometimes it turns out that the expectations of those concluding a contract for the establishment of a right of use differ from the case law views, especially as regards the rights and obligations of the parties.

December 1, 2021

Major provisions of the Spatial Development Act contradict the Constitution

The provisions of the Spatial Development Act on the existence of an applied detailed development plan with regard to the regulation, including the street regulation, as a condition for the issuance of a building permit, are unconstitutional.

November 10, 2021

Donka Stoyanova - national rapporteur at biennial FIDE congress

DPC partner Donka Stoyanova was one of the national rapporteurs for Bulgaria at the XXIX Congress of the International Federation of European Law (FIDE), held on 3-6 November in the Hague.

November 9, 2021

G20 endorsed the introduction of minimum corporate tax for the big companies

At the end of October 2021, the leaders of the countries of G20 endorsed an agreement for introducing a minimum corporate tax for multinational corporations.

Ivan Alexander Manev

October 4, 2018

Sofia welcomed ICC & DRBF regional conference on construction dispute resolution

The event hosted more than 50 eminent practitioners and speakers who shared their experience on different mechanisms and techniques for dispute resolution and dispute avoidance in the area of construction law.

October 28, 2020

Pencho Stanchev: price may not be the most important criteria when choosing an electricity supplier

The discussion, organized by Investor.bg with the participation of professionals from the energy industry, aimed to answer some current questions related to the mass transfer of non-household electricity consumers to the free electricity market.

Pencho Stanchev

November 11, 2020

Tsvetelina Georgieva spoke on the state intervention in insolvent companies at AIJA commissions month

Should states ever protect insolvent companies or intervene in insolvency proceedings and what is the line that a state shouldn’t cross in its intervention were some of the questions discussed.

Tsvetelina Koleva

February 26, 2018

Martin Zahariev, PHD, presented GDPR at a workshop under a European project

Martin Zahariev, PhD delivered a presentation at a workshop on privacy and education in the context of the so called “once-only” principle.

January 7, 2020

Desislava Krusteva gains recognition in the Women in Data 2019 survey

Global Data Review – the leading information source within the data law landscape – has recently released its new survey Women in Data 2019.

© All rights reserved 2007-2026 Dimitrov, Petrov & Co.

Design by StanVision