This article explains the key GDPR and Bulgarian data protection obligations for foreign entrepreneurs processing personal data in Bulgaria, including controller and processor duties, legal basis, privacy notices, data subject rights, DPO requirements and international data transfers.