<\/p>\n
What does Article 319e of the Criminal Code regulate?<\/strong><\/p>\n Article 319e of the Bulgarian Criminal Code focuses on a specific field of cybersecurity \u2014 the provision of information services, particularly those related to electronic signatures, electronic identification, and trust services.<\/p>\n The crime consists of violating Article 6, paragraph 2, item 5 of the Electronic Document and Electronic Trust Services Act (EDEUTSA)<\/strong>, with punishable conduct including failure to comply with the requirements for data protection and security of the electronic signature.<\/p>\n This is a type of \u201cdelicate cybercrime\u201d<\/strong>, where the violation may not be obvious to the ordinary user but has the potential to cause serious consequences for the integrity of the legal system \u2014 especially when it concerns electronic identification or digital transactions.<\/p>\n According to this provision, trust service providers are obliged to implement technical and organizational measures<\/strong> to protect electronic signatures, electronic seals, and trust service credentials.<\/p>\n This includes preventing:<\/p>\n unauthorized access to certificates;<\/p>\n<\/li>\n the use of fake identities;<\/p>\n<\/li>\n compromise of cryptographic keys;<\/p>\n<\/li>\n security weaknesses in the infrastructure.<\/p>\n<\/li>\n<\/ul>\n Violating this rule, when it creates a risk for the legal validity of electronic services or for citizens\u2019 data, constitutes a crime under Article 319e CC.<\/strong><\/p>\n The penalty under Article 319e is:<\/p>\n imprisonment of up to 6 years<\/strong>, and<\/p>\n<\/li>\n a fine of up to 5,000 BGN<\/strong>, Typical examples of violations under Article 319e include:<\/p>\n A trust service provider does not properly encrypt clients\u2019 private keys, thus exposing them to theft and misuse.<\/p>\n<\/li>\n Issuing electronic signatures without adequate identity verification, allowing the creation of false authorizations.<\/p>\n<\/li>\n A compromised trust service system where third parties gain access to certificates and sign documents on behalf of others.<\/p>\n<\/li>\n<\/ul>\n Although case law under Article 319e is limited, in recent years there has been increasing prosecutorial interest<\/strong>, especially after the introduction of mass electronic administrative services.<\/p>\n For example, in 2023 an investigation was conducted against a trust service provider whose system was compromised, allowing electronic signatures to be issued without valid identification. Although no direct damages were initially caused, the prosecution acted due to the serious risk to the public interest.<\/strong><\/p>\n Article 319e CC serves as a safeguard against abuse<\/strong> in one of the most sensitive areas of the digital age \u2014 electronic identity and authentication. It sets a high standard of responsibility for trust service providers<\/strong>, who not only manage data but guarantee the legal effect of actions performed in electronic form.<\/p>\n If you have been affected by misuse of an electronic signature, an unauthorized signed document, or lack of protection of your personal electronic data<\/strong>, do not hesitate to contact a criminal law attorney<\/strong> to defend your rights and file a complaint with the competent authorities.<\/p>\nWhat does Article 6, paragraph 2, item 5 of the EDEUTSA say?<\/h3>\n
\n
Penalties<\/h3>\n
\n
unless the act is subject to a heavier penalty under another article of the Criminal Code (e.g. fraud, personal data misuse, or document-related crimes).<\/p>\n<\/li>\n<\/ul>\nWhat crimes does it cover?<\/h3>\n
\n
Examples from practice<\/h3>\n
Conclusion<\/h3>\n