The National Assembly adopted on September 13, 2002, amendments in the Penal Code. A new Chapter on Cybercrime included:

Art. 319a (1) A person who obtains unauthorised access to the resources of a computer and copies or uses computer data without permission, when such one is required shall be punished with a fine of up to 3000 levs.
(2) In case the act under para one has been committed by two oe more persons that have conspired to commit the act, the punishment shall be imprisonment up to one year or a fine of up to 3000 levs.
(3) In case the act under para one is committed repeatedly the punishment shall be imprisonment of up to three years or a fine of up to 5000 levs.
(4) If the acts under the previous items 1-3 are committed concerning information qualified as government secret, the punishment shall be imprisonment from one to three years, provided there is no heavier punishment prescribed.
(5) If the act under item four causes grave concequences, the punishment shall be imprisonment from one to eight years.

Art. 319b (1) A person who without the permission of the administrator or the user of the computer adds, changes, deletes or destroys a computer program or data when the impact is significant shall be punished with imprisonment up to one year or a fine up to 2 000 leva.
(2) In case the act under the previous paragraph has caused significant damage or other grave consequences, the punishment shall be imprisonment up to two years or a fine of 3 000 leva.
(3) In case the act under para one has been committed with the purpose of obtaining material benefit the punishment shall be imprisonment from one up to three years or a fine of 5 000 leva.

Art. 319c (1) A person who commits an act under the previous article with regard to data that by virtue of a law are provided through electronic means or through a magnetic carrier shall be punished by imprisonment of up to two year and fine of up to 3 000 leva.
(2) If the act under the previous para has been committed for the purpose of frustrating the execution of duties, the punishment shall be imprisonment up to three years and a fine of up to 5 000 leva.

Art. 319d (1) A person who brings a computer virus in a computer or the information network shall be punished with a fine of up to 3 000 leva.
(2) If significant damage has been caused by the act under the previous paragraph or it has been committed repeatedly the punishment shall be imprisonment up to three years and a fine of up to one thousand leva.

Art. 319e (1) A person who distributes computer or system password and this results in disclosure of personal data or a government secret shall be punished with imprisonment up to one year.
(2) If the act under the previous paragraph has been committed for material advantage or has caused significant damage, the punishment shall be imprisonment up to three years.

Art. 319f A service provider who violates the provisions of Art. 6, para 2, item 5 of the Electronic Document and Electronic Signature Act shall be punished with a fine of up to 5000 leva, provided he is not punishable with a heavier punishment.