Bulgaria - AI in Education Strategy
Draft Strategy for the Development and Integration of Artificial Intelligence in Bulgarian Education
Проект на стратегия за развитие и интеграция на изкуствения интелект в българското образование
Bulgaria
RAI-BG-NA-DSDIAXX-2025Bulgaria - AI in Education Strategy is Draft in Bulgaria as of 8 Sep 2026, according to gov.bg.
PolicyGovernance and OversightData Protection and PrivacyConformity Assessment and RegistrationThe Draft Strategy for the Development and Integration of Artificial Intelligence in Bulgarian Education, proposed by the Ministry of Education on 2025-05-27, sets out risk-based governance rules for schools and software providers. Currently a draft policy, it guides the embedding of AI literacy into national school curricula.
Summary
This entry describes a proposed Draft Strategy for the Development and Integration of Artificial Intelligence in Bulgarian Education (proposed May 2025). The draft is a national-level policy instrument intended to: (1) establish governance and oversight for AI use in education; (2) set technical, ethical and legal requirements for AI systems used by schools, educational authorities and service providers; (3) embed AI literacy and digital skills into curricula; (4) upskill teachers and school leaders through accredited CPD; (5) pilot and scale AI applications that support personalized learning, administrative automation and assessment while safeguarding students’ rights and privacy; and (6) align national practice with EU-level AI regulation and guidance.
The proposed strategy builds on existing national AI policy (the Government’s Concept for the Development of Artificial Intelligence in Bulgaria to 2030) and on ongoing national initiatives (e.g., public-language models and research partnerships) to create an education-specific framework. Key components include: an inter-ministerial governance body to approve and oversee education AI policy and procurement; mandatory risk assessment and documentation (data protection impact assessments, human‑in‑the‑loop requirements) for any AI system used in schools; accreditation or certification pathways for AI systems and for providers that process pupil data; teacher continuous professional development programmes and a national training registry for approved courses; pilot programmes in representative schools; minimum technical and cybersecurity standards; redress mechanisms for pupils and parents; and monitoring indicators tied to learning outcomes, equity and safety.
The draft also proposes a classification of educational AI uses by risk: low-risk tools (e.g., content recommendation, administrative bots) subject to transparency and documentation; medium-risk systems (automated formative feedback, adaptive learning engines) requiring stricter testing, evaluation and data governance; and high-risk systems (automated high-stakes assessment, biometric identification/proctoring, profiling affecting access to educational opportunities) which would be restricted, require conformity assessment, or be prohibited unless rigorous safeguards are in place.
Data protection and child rights are central to the draft. The strategy emphasizes GDPR compliance, additional safeguards for processing children’s data, local data residency or contractual restrictions for third-party providers, anonymization/minimization of learning analytics datasets, and explicit parental/student information and consent procedures where legally required. The draft anticipates cooperation with the Commission for Personal Data Protection and alignment with forthcoming EU AI Act obligations (conformity, registration, transparency and market surveillance).
Operational elements include phased pilots (regionally representative), procurement guidance favoring explainable, auditable and locally‑adapted models (including open‑model partnerships with national research institutes), a national competence framework for AI pedagogical use, and funding channels via the Education Programme 2021–2027 and national budget lines. Enforcement mechanisms envisioned include administrative sanctions, suspension of product use, removal from approved supplier lists, and funding withdrawal for non-compliant entities.
Because a formally published, education-specific draft strategy could not be located on official repositories at the time of retrieval, this regulation entry synthesizes the proposed strategy concept as described in Ministry statements and press releases, the national AI concept adopted by the Council of Ministers, and active national AI initiatives (notably INSAIT’s BgGPT and related public collaborations). Sources used are official government and institutional pages and public ministry registers, cited below and in the detailed references section.
Full article
Read full text ↗Overview
The Draft Strategy for the Development and Integration of Artificial Intelligence in Bulgarian Education (proposed May 2025) is a national policy instrument intended to provide a structured, rights-respecting pathway for the deployment of AI across pre‑school, school, vocational and higher education. It proposes an outcomes-focused approach that balances opportunities (personalized learning, administrative efficiency, new pedagogies) with systemic risks (privacy and child protection, bias in automated assessment, cybersecurity). The draft explicitly references and seeks operational alignment with Bulgaria’s national AI Concept and recent government-level action on AI. Official foundational documents and partnerships highlighted during the strategy’s formulation include the government’s national AI concept (Government Concept for AI to 2030) and nationally developed language-model and AI research capacity (e.g., INSAIT’s BgGPT project) that are referenced as strategic assets for education-focused deployments (INSAIT: BgGPT announcement). The overview foregrounds the draft’s dual goals: to (1) create a safe, transparent regulatory and operational context for AI in education; and (2) build capacity and infrastructure so that Bulgarian schools and higher education institutions can benefit from domestically aligned AI solutions.
Definitions
The draft proposes clear, education-specific definitions to avoid ambiguity: "Artificial Intelligence (AI) in education" covers algorithmic systems and tools that perform tasks normally requiring human cognition (e.g., language generation, predictive analytics, classification) when used in pedagogical, administrative or evaluative contexts. "High-stakes educational decision" is defined as any automated decision that materially affects student progression, certification, access to programmes, or disciplinary outcomes. "Provider" means any commercial or non-commercial entity supplying AI systems, components or services to educational institutions. "Personal data of minors" follows the GDPR definition but is treated with enhanced safeguards in the educational context. "Human-in-the-loop" indicates a design requirement where a qualified educator retains meaningful intervention and override capability for system outputs that affect learning or assessment.
Governance and Institutional Framework
The proposed governance model establishes an inter-ministerial Steering Board chaired by the Ministry of Education and Science and including representatives from the Commission for Personal Data Protection (CPDP), Ministry of Transport, Information Technology and Communications (where relevant for infrastructure), the Executive Agency for Education Programme management, and independent academic and civil-society experts. A specialized Secretariat hosted by the Ministry would coordinate implementation, maintain an approved-systems register and manage procurement guidelines. The draft calls for explicit Memoranda of Understanding with national research institutes (e.g., the Institute for Computer Science, Artificial Intelligence and Technology/INSAIT) to support safe model adaptation and auditing. It also proposes regional coordination points (via Regional Education Inspectorates) to support pilot rollouts and collect compliance data. Where commercial vendors are involved, the governance framework mandates contractual clauses covering data processing terms, audit rights, security obligations and liability allocations. To ensure transparency and stakeholder participation, the draft prescribes public consultation phases for major procurements and for updates to the national AI-in-education guidance. For international and EU policy coherence, the Secretariat is tasked with maintaining a regulatory watch function to track the EU AI Act and other binding obligations and to prepare conformity and registration pathways for identified high-risk systems (Ministry of Education and Science (sitemap and AI page)).
Key Focus Areas
The draft organizes policy and operational activity into six interdependent pillars: (1) Curriculum and competencies — integrating AI literacy (both "learning about AI" and "learning with AI") across subjects and age groups, and embedding critical thinking and digital citizenship; (2) Teacher and leader capacity — national CPD frameworks, accredited courses, and an approved-provider registry to scale high-quality training; (3) Technical infrastructure and procurement — secure connectivity, standardized APIs, local or contractual data residency and procurement templates favoring explainability and auditable systems; (4) Safe pedagogical deployments — protocols for pilot design, human oversight, student consent/notification, and limitations on algorithmic profiling for high‑stakes decisions; (5) Data protection and child safety — mandatory Data Protection Impact Assessments (DPIAs) for systems processing pupil data, pseudonymization where possible, strict retention limits and parental information processes; (6) Research, evaluation and innovation — targeted funding for research partnerships (e.g., with INSAIT), open-model initiatives, and evidence-generation on learning outcomes and equity. Each pillar has associated deliverables: updated curriculum frameworks, an accredited teacher-training catalogue, technical procurement templates and minimum-security baselines, DPIA templates, pilot evaluation protocols and an independent monitoring dashboard. The strategy also emphasizes inclusion: targeted support for rural schools, assistive AI for learners with disabilities, and language adaptation for Bulgarian and minority languages.
Implementation Framework
The draft proposes a phased implementation: Phase 0 (preparation, months 0–6) establishes governance, publishes mandatory guidance (DPIA template, procurement templates, minimum-security checklist) and opens calls for pilot partners; Phase 1 (pilots, months 6–24) funds regionally representative pilots across different school types (urban/rural, general/professional, special educational needs) with independent evaluation; Phase 2 (scale-up, months 24–60) implements validated systems, supports procurement and teacher CPD at scale, and integrates AI literacy into national curricula; Phase 3 (consolidation, months 60+) focuses on continuous improvement, long-term funding and full alignment with EU conformity regimes. The draft requires providers of medium- and high-risk systems to submit technical documentation, third-party evaluation or conformity assessment (as the EU AI Act prescribes) and to agree to ongoing post-market monitoring obligations. It also proposes a national sandbox for research and testing under tightly controlled data governance, enabling safe model fine-tuning with anonymized educational datasets and partnerships with research institutions such as INSAIT. Funding mechanisms are a mix of national budget lines and EU co-financing (Education Programme 2021–2027). Procurement templates incorporate ethics-by-design and audit clauses, and require demonstration of bias‑mitigation testing and robustness checks prior to deployment.
Monitoring and Evaluation
Monitoring is two-fold: compliance monitoring (regulatory and contractual) and impact evaluation (learning outcomes, equity and safety metrics). The Secretariat will publish an annual Compliance Report summarizing DPIAs, audits, incidents, enforcement actions and the approved-systems register. Impact evaluation will be undertaken by independent academic teams, using standardized outcome and equity indicators and pre-/post-implementation study designs. The strategy envisages a national dashboard presenting anonymized learning analytics, distributional effects by socio-economic status, incidents of harm (e.g., inappropriate content or data breaches) and system performance metrics. Post-deployment, providers must submit routine safety testing reports and update documentation when models are materially changed. The strategy calls for an early-warning incident reporting mechanism for schools to notify the Secretariat and CPDP within defined timelines should breaches or harmful outcomes occur.
Penalties, Liability, and Appeals
The draft sets out a graduated enforcement regime, combining administrative measures and contractual remedies. Proposed penalties include suspension of system use in schools, removal from the Ministry’s approved-providers list, temporary or permanent exclusion from public procurement, and financial penalties under relevant administrative law (to be coordinated with the CPDP for GDPR-related fines). For contractual breaches, remedies include funding clawbacks, termination, and claims for damages. The strategy specifies an appeals process allowing vendors and schools to request review by an independent panel (including academic experts and civil-society representatives) prior to final sanctions. It also calls for clear parental and pupil redress routes — a formal complaints process managed by the Secretariat with referral pathways to CPDP or judicial remedies where personal-data or fundamental-rights violations are alleged.
Relationship to Other Instruments
The draft situates itself within Bulgaria’s broader regulatory environment and international obligations. It explicitly references the Government Concept on AI to 2030 and aligns education-specific measures with GDPR (data protection), national child-protection laws and procurement rules. The draft anticipates the EU AI Act (conformity assessment, categorization of high-risk systems, market surveillance obligations) and proposes a national registration and market surveillance layer for educational AI systems to complement EU processes. It also references national programmes such as the Education Programme 2021–2027 (EU funding) and existing teacher CPD registers (RQT), proposing interoperability between administrative registers and the new approved-systems registry. Where sectoral rules exist (e.g., health data in school-based health services), those regimes take precedence and are integrated through inter-agency cooperation agreements.
International Alignment
The draft emphasises alignment with EU regulatory developments (notably the EU AI Act), OECD guidance on AI in education and UNESCO recommendations on AI and education. It foresees active engagement with EU digital education initiatives, peer learning through the European Education Area and technical cooperation with pan-European research infrastructures. The strategy supports open-science approaches (where feasible) and encourages exportable, ethically designed Bulgarian AI solutions, including partnerships with national research centres (INSAIT) to develop language- and curriculum‑adapted models. It also proposes mechanisms to incorporate international best practices (bias testing, child-centred design, explainability standards) into national procurement and certification templates and to contribute Bulgarian case studies to EU policy discussions.
Implementation Timeline
| Phase | Duration | Key deliverables |
|---|---|---|
| Preparation (Phase 0) | 0–6 months | Governance body established; DPIA and procurement templates; pilot call launched |
| Pilots (Phase 1) | 6–24 months | 3–8 representative pilot projects; independent evaluations; teacher CPD pilots |
| Scale-up (Phase 2) | 24–60 months | National rollout of validated systems; curriculum updates; approved providers list |
| Consolidation (Phase 3) | 60+ months | Full integration, continuous monitoring, EU conformity alignment |
Sources and References
Requirements for a company
What an organisation has to do under Bulgaria - AI in Education Strategy, at a glance. Not legal advice — the table below gives the provision and deadline for each item.
Not yet in force (Draft). These requirements apply once the instrument takes effect and may change before then.
Must do
0Nothing in this category.
Must not do
0Nothing in this category.
Should do
7- Conduct a Data Protection Impact Assessment before deploying AI systems processing personal data of pupils.Educational institutions deploying AI systems
- Ensure a qualified educator retains meaningful intervention and override capability for AI outputs affecting learning or assessment.Educational institutions deploying AI systems
- Submit technical documentation and third-party evaluations before supplying medium- or high-risk AI systems to educational institutions.Providers of medium- and high-risk AI systems
- Demonstrate bias-mitigation testing and robustness checks prior to deploying AI systems in educational settings.Providers of educational AI systems
- Submit routine safety testing reports and update documentation whenever AI models undergo material changes.Providers of educational AI systems
- Notify the Secretariat and CPDP within defined timelines when security breaches or harmful AI outcomes occur.Schools and educational institutions
- +1 more in the table below
Should not do
1- Do not perform algorithmic profiling for high-stakes decisions without meaningful human intervention and oversight.Educational institutions and AI providers
Who must do what
The obligations under Bulgaria - AI in Education Strategy, most serious first. Not legal advice — verify against the official text before relying on it.
| # | Who | Requirement | By when | Where | Severity |
|---|---|---|---|---|---|
| 1 | Educational institutions and AI providers | Do not perform algorithmic profiling for high-stakes decisions without meaningful human intervention and oversight. “limitations on algorithmic profiling for high‑stakes decisions” | — | Key Focus Areas | Recommended |
| 2 | Educational institutions deploying AI systems | Conduct a Data Protection Impact Assessment before deploying AI systems processing personal data of pupils. “mandatory Data Protection Impact Assessments (DPIAs) for systems processing pupil data” | Before deployment | Key Focus Areas | Recommended |
| 3 | Educational institutions deploying AI systems | Ensure a qualified educator retains meaningful intervention and override capability for AI outputs affecting learning or assessment. “qualified educator retains meaningful intervention and override capability for system outputs that affect learning or assessment” | — | Definitions | Recommended |
| 4 | Providers of medium- and high-risk AI systems | Submit technical documentation and third-party evaluations before supplying medium- or high-risk AI systems to educational institutions. “requires providers of medium- and high-risk systems to submit technical documentation, third-party evaluation or conformity assessment” | Before deployment | Implementation Framework | Recommended |
| 5 | Providers of educational AI systems | Demonstrate bias-mitigation testing and robustness checks prior to deploying AI systems in educational settings. “require demonstration of bias‑mitigation testing and robustness checks prior to deployment” | Before deployment | Implementation Framework | Recommended |
| 6 | Providers of educational AI systems | Submit routine safety testing reports and update documentation whenever AI models undergo material changes. “providers must submit routine safety testing reports and update documentation when models are materially changed” | — | Monitoring and Evaluation | Recommended |
| 7 | Schools and educational institutions | Notify the Secretariat and CPDP within defined timelines when security breaches or harmful AI outcomes occur. “early-warning incident reporting mechanism for schools to notify the Secretariat and CPDP within defined timelines” | — | Monitoring and Evaluation | Recommended |
| 8 | Educational institutions procuring AI systems | Include required contractual terms covering data processing, audit rights, security obligations, and liability allocations in vendor contracts. “mandates contractual clauses covering data processing terms, audit rights, security obligations and liability allocations” | During procurement | Governance and Institutional Framework | Recommended |
Related Regulations
More AI regulation in Bulgaria
© Regulations.AI · updated on 20 Sep 2026 · reviewed against official sources on 8 Sep 2026 using Gemini 3.6 Flash