Irena Koleva
Faculty profile

Irena Koleva

Managing Partner · Data Privacy, Cybersecurity & AI Governance
Filova, Micheva, Ivanov & Koleva Law Partnership · Sofia, Bulgaria

Sofia Bar Association attorney, IAPP-certified privacy and AI governance professional (CIPP/E, AIGP, FIP). 10+ years across data protection, cybersecurity, AI governance, digital law and regulatory compliance, including external DPO mandates registered with the Bulgarian supervisory authority. Contributor of the Bulgaria AI Note for PrinciplesAI.

Biography

Practice and focus

Irena is Managing Partner at Filova, Micheva, Ivanov & Koleva Law Partnership in Sofia. She holds a Master’s degree in Law from Sofia University and is registered with the Sofia Bar Association. Her main practice areas are personal data protection, cybersecurity, AI governance, digital law, and regulatory compliance.

Irena has more than ten years of legal experience, including as a managing associate at a Big4 law firm in Bulgaria. She has been working in the field of data protection and digital law since 2017, with extensive experience in GDPR gap analysis and implementation, performing the functions of external DPO registered with the Bulgarian supervisory authority (Commission for Personal Data Protection), and projects on ePrivacy, DORA, NIS2, and the EU AI Act.

She is a certified privacy and AI governance professional, holding the CIPP/E, AIGP, and FIP credentials from the International Association of Privacy Professionals (IAPP). Irena chaired the IAPP Bulgaria KnowledgeNet Chapter from 2023 to 2025 and is a member of Women4Cyber Bulgaria.

She has lectured at privacy, cybersecurity, and AI forums and conducted EU AI Act trainings for Bulgarian companies. She is the author of numerous articles and publications on data protection and AI for reputable Bulgarian and international media.

Practice areas

Areas of focus

Personal Data Protection Cybersecurity AI Governance Digital Law Regulatory Compliance GDPR Implementation External DPO mandates EU AI Act NIS2 DORA ePrivacy Due Diligence (M&A · cross-border)
Career & community

Bulgarian privacy, cyber, and AI governance practice

Irena’s practice spans local and multinational engagements across due diligence, advisory, and compliance, including cross-border data-flow scenarios. She maintains active community roles in Bulgaria’s privacy and cybersecurity professional networks.

2023–2025
Chair · IAPP Bulgaria KnowledgeNet Chapter
Led the IAPP’s national chapter in Bulgaria for two terms; convened privacy and AI-governance practitioner events and knowledge exchange.
Current
Managing Partner · FMIK Law Partnership
Filova, Micheva, Ivanov & Koleva Law Partnership, Sofia. Practice anchored in personal data protection, cybersecurity, AI governance, digital law, regulatory compliance.
Since 2017
Data protection & digital law practice
GDPR gap analysis & implementation; external DPO mandates registered with the Bulgarian supervisory authority (CPDP); ePrivacy, DORA, NIS2, EU AI Act compliance projects.
Earlier
Managing Associate · Big4 law firm (Bulgaria)
Privacy, technology, and regulatory practice within a Big4 legal services line; foundation for current digital-law practice.
Speaking & writing
Lecturer · author
Forums on privacy, cybersecurity, and AI; conducted EU AI Act trainings for Bulgarian companies; numerous articles and publications in Bulgarian and international media.