Deputy Commissioner Article 96 Deputy Commissioner for the protection of personal data elected in compliance with the Law on Protection of Personal Data (“Official Gazette of the RS”, No. 97/08, 104/09 – other law, 68/12 – CC and 107/12) continues to perform such duty until the expiry of the term of office for which he/she … Read more
Article 95 A fine ranging from RSD 50,000 to RSD 2,000,000 will be imposed for a misdemeanor against the controller and/or processor that is a legal entity if they: 1) process the personal data contrary to the principles of processing referred to in Article 5, paragraph 1 of this Law; 2) process the personal data … Read more
Processing and Freedom of Expression and Information Article 88 The provisions of Chapters II through VI and Articles 89 through 94 of this Law do not apply to processing carried out for the purposes of journalistic reporting and publication of information in media, as well as for the purposes of scientific, artistic, or literary expression, … Read more
Right to File a Complaint with the Commissioner Article 82 Data subjects have the right to file a complaint with the Commissioner if he/she considers that the processing of personal data relating to them has been carried out contrary to the provisions of this Law. Provisions of the law regulating inspection supervision in the part … Read more
1. Independent status Supervisory Body Article 73 To protect the fundamental rights and freedoms of natural persons in relation to processing, the Commissioner, as an independent public authority, performs the tasks related to monitoring the application of this Law in compliance with the prescribed authorizations. The Commissioner has a deputy for personal data protection. The provisions … Read more
General Principles of Transfer Article 63 Any transfer of personal data which is undergoing processing or is intended for further processing after transfer to another country or an international organization may take place only if, subject to the other provisions of this Law, the conditions laid down in this Chapter of the Law are complied … Read more
1. General Obligations Obligations of the Controller Article 41 The controller is obliged to implement appropriate technical, organizational and staff-related measures to ensure that processing is performed in compliance with this Law and to be able to demonstrate that, taking into account the nature, scope, circumstances and purpose of processing, as well as the likelihood … Read more
1. Transparency and Modalities for the Exercise of the Rights Transparent Information, Communication, and Methods for Exercising the Rights of Data Subjects Article 21 The controller is obliged to take appropriate measures to provide complete information referred to in Articles 23 and 24 of this Law and/or information relating to the exercise of the rights … Read more
Processing Principles Article 5 Personal data must be: 1) processed lawfully, fairly, and in a transparent manner in relation to the data subject (“lawfulness, fairness and transparency”). Lawful processing is the processing performed in compliance with this Law and/or other laws regulating processing; 2) collected for specified, explicit, and legitimate purposes and cannot be further … Read more
Scope Article 1 This Law regulates the right to protection of natural persons regarding the processing of personal data and the free movement of such data, on the principles of processing, on the rights of the data subjects, obligations of personal data controllers and the personal data processors, code of conduct, transfer of personal data … Read more