If you believe your personal data has been lost or misused and you have suffered loss or distress, you may be able to claim for compensation. However, data breach cases are not straightforward. It is recommended to contact the Commission for Personal Data Protection (CPDP), the Bulgaria`s data protection regulator and supervisory authority for GDPR compliance. The CPDP can investigate the incident and determine if an organisation is at fault for the breach. This can be a slow process, but it can add weight to a compensation claim. The CPDP does not award compensation, to be awarded compensation you will need to make a claim against the organisation who breached your data.