The Rules for the Implementation of the Electronic Identification Act were promulgated in the Bulgarian State Gazette, issue 74 of 20th September 2016; and regulate in detail the implementation of the Electronic Identification Act which was adopted by the Bulgarian Parliament on the 11th May 2016. The aforesaid legal statute creates a comprehensive framework for the conduction of a safe online identification process.
The adoption of the Rules follows a Public Consultation which took place between 29th June 2016 and 13th July 2016 and encouraged the participation of various stakeholders from the civil, scientific and technological fields.
The rules give further regulation to:
The algorithms and methods for creating electronic identifiers;
The algorithms and methods for creating sectoral electronic identifiers (Applicable in various sectors of public everyday life, i.e. banking);
The rules and conditions for the registration of administrators of electronic identity and the legal and safety requirements for their activities;
The rules and conditions for the registration of centers for electronic identification and the legal requirements, applicable in terms of their activities;
The procedures for administering registers under Art. 19 of the Electronic Identification Act;
The procedure for the verification of certificates for electronic identity under Art. 25 of the Electronic Identification Act;
The legal standards and requisites of the electronic identity certificates, regulated by Art. 3 of the Electronic Identification Act;
The requirements for the carriers of certificates for electronic identity under Art. 13, para 7 and Art. 20, para 6 from the Electronic Identification Act and the rules for their issuance and safe management;
The protocols, technical requirements, and methods for verification of electronic identity under Art. 24 of the Electronic Identification Act;
The protocols and technical requirements under Art. 28 of the Act;
The range of stored data for each verification procedure under Art. 27 of the Act (date and time of the verification, requester of the verification, etc.);
The requirements for registration of e-ID administrators and centres under Art. 11 of the Act;
The requirements in terms of technical equipment and technologies used by e-ID administrators and centres under Art. 13, para 6 of the Act;
The requirements and security procedures under Art. 13, para 3 and Art. 14, para 2 of the Act;
The requirements for information systems subject to control under Art. 38 of the Act;
The particulars of the application for the registration of e-ID administrators or centres under Art. 15, para 1 of the Act;
The procedure for keeping, storing, and access to the registry of administrators and centers under Art. 10 of the Act;
The rules for the administration and the procedure for accessing the authorization register, under Art. 29, para 4 and Art. 32 of the Act.
The registers, led in accordance to the Rules are in line with the requirements of the Personal Data Protection Act (available in Bulgarian language only).