- National procedures – described in the Bulgarian Criminal Procedure Code.
• General rule (Article 159):
Upon request of the court or the pre-trial authorities, all institutions, legal persons, officials and citizens shall be obligated to preserve and hand over all objects, papers, computerized data and other data, that may be of significance to the case.
• Gathering of the electronic communication (Article 159a):
Upon request by a court as part of court proceedings or based on motivated order by a judge of the respective court of first instance, issued by request of the supervising prosecutor of pre-trial proceedings the enterprises, providing public electronic communication networks and/or services shall make available the data, generated in the course of performance of their activities, which may be required for:
- tracing and identification of the source of the communication link;
- identification of the direction of the communication link;
- identification of the date, hour and duration of the communication link;
- identification of the type of the communication link;
- identification of the terminal electronic communication device of the user of that presenting itself as its terminal device;
- establishment of an identification code of the cells used.
The above-mentioned data shall be collected where required for investigation of serious premeditated crimes.
The request of the supervising prosecutor shall be substantiated and must certainly contain:
- information concerning the crime, for the investigation of which data concerning the traffic is required;
- description of the circumstances, on which the request is based;
- data regarding the individuals, for whom data concerning the traffic is required;
- the time period, which the information summary must cover;
- the investigating authority, to which the data must be provided.
The court shall indicate in its order:
- data, which must be reflected in the information summary;
- the time period, which the information summary must cover;
- the investigating authority, to which the data must be provided.
The time period, for which provision of the above-mentioned data may be requested and authorised, shall not exceed 6 months.
If the information summary contains data, which is not related to the circumstances under the case and does not contribute to their clarification, upon motivated written request of the supervising prosecutor the judge, who issued the authorisation, shall order the destruction of that material. The destruction shall be performed under procedure, approved by the Prosecutor General. Within 7 days of receipt of such order the enterprises and the supervising prosecutor shall submit to the judge who issued it the protocols of destruction of the data.
• Search and seizure (Articles 160-163):
In pre-trial proceedings search and seizure shall be performed with an authorisation by a judge from the respective first instance court or a judge from the first-instance court in the area of which the action is taken, upon request of the prosecutor. In cases of urgency, where this is the only possible way to collect and keep evidence, the pre-trial authorities may perform physical examination without authorisation , the record of the investigative action being submitted for approval by the supervising prosecutor to the judge forthwith, but not later than 24 hours thereafter.
The computerized information systems containing computerized data seized shall be shown to the certifying witnesses and the other attending persons. Where necessary, these shall be wrapped and sealed at the location where they had been seized.
Seizure of computerized data shall be operated through record on paper or another carrier. In case of a paper carrier, each page shall be signed by. In other cases the carrier shall be sealed with a note stating: the case, the body performing the seizure, the location, date, and names of all individuals present who shall sign it. Carriers will only be unsealed with the authorisation of the prosecutor for the needs of the investigation, which shall be carried out in presence of certifying witnesses and an expert- technical assistant. In court proceedings carriers shall be unsealed upon decision of the court by an expert technical assistant.
• Interception and seizure of correspondence (Article 165):
Interception and seizure of correspondence (including electronic correspondence) shall be allowed only where this is necessary for disclosure or prevention of serious crime.
Interception and seizure of correspondence in pre-trial proceedings shall be performed upon request of the prosecutor with the authorisation of a judge from the respective first instance court or a judge from the court in the area of which the action is taken.
In urgent cases, when this is the only option to collect and preserve evidence in investigating crimes under Article 108a and Article 354a of the Bulgarian Criminal Code, the pre-trial authorities may intercept undelivered correspondence without the authorisation. The supervising prosecutor shall - promptly, but no later than 24 hours - submit the records of the executed action to a judge of the responsible court, together with a reasoned written request for seizure of the intercepted correspondence. The seizure shall be effected on the basis of a reasoned written authorisation of the judge who shall issue a ruling promptly, but no later than 24 hours. If rejecting the seizure, the judge shall also rule on the intercepted correspondence.
In court proceedings search and seizure of correspondence shall be performed by a decision of the court which is trying the case.
- International procedures ( including Available channels/ways to obtain electronic evidence from your Member State; urgent procedures; specialised networks to obtain electronic evidence e.g. 24/7 Budapest Convention/police channels)
• Police channels: Europol/Interpol/Sienna/Liaison and foreign liaison officers: to obtain (basic) subscriber information
• BG 24/7-channel/network (Budapest Convention): urgent preservation requests to seize volatile subscriber information/traffic data/content (only with MLAT-guarantee: the available data will be preserved/seized and will only be provided after receiving the MLAT/EIO in 60 days)
• Article 18 Budapest Convention: on a voluntary basis (most companies established in Bulgaria supply, however, only on the basis of a request for judicial assistance – to cover themselves against the customer and because of GPDR-issues)
• General MLAT (COE and EU treaties; + UN Treaties and bilateral treaties)
- International legal framework applicable in Bulgaria
a. EU Directive 2014/41/EU, with the European Investigation Order (EIO), was implemented in BG law, effective from 23/02/ 2018.
b. Budapest Convention
NB. For countries who have not implemented this EU Directive 2014/41/EU:
c. EU Convention on Mutual Assistance in criminal matters between the member states of the
European Union (29 May 2000);
d. European Convention on Mutual Assistance in criminal matters (Strasbourg, 1959 and
additional protocols);
e. other bilateral and multilateral treaties.