Thu, Dec
43 New Articles

Personal Data Transfer Out of Serbia – a New Area of Legal Practice

Personal Data Transfer Out of Serbia – a New Area of Legal Practice


In recent times, more and more international companies are outsourcing their call centres and data processing facilities to Serbia.

This has opened a practice area which has, until recently, been relatively unknown to Serbian law professionals – transferring of personal data out of Serbia.

If the data collected and stored in Serbia is transferred to a country that is a party to the Council of Europe Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data, the process is a simple one, possibly impeded only by technical matters.

However, if the data is to be transferred to a country not a party to the said Convention, among others USA, Canada and Australia, the process could turn out to be lengthy and demanding.

The transfer is supervised by the Commissioner for Information of Public Importance and Personal Data Protection. The Commissioner has the final saying on the demanded transfer and can authorise it or deny it.

In order to start the process, a company has to be registered as a personal data processor. This is done by registering at least one database with the Commissioner. This is done both on-line and in hard copy. It is an unwritten rule that the first database registered is an employee database.

For each database the Commissioner reviews legal basis for collection of the data and the justification of data collection. The legal basis and justification for data collection and transfer are under even more detailed scrutiny when it comes to data transfer outside of the Convention area.

The Commissioner has the discretionary right to deny a transfer if he deems it unjustified, or if he finds that the data security and the right of privacy of an individual will be put in jeopardy with the requested transfer. The consent forms are also put under detailed scrutiny, especially in cases where the Commissioner finds that the individual giving consent is not in position to refuse the consent, for example employees.

It is a common practice that a data transfer agreement and a consent form are redrafted several times before the consent is given.

According to unofficial estimates of the Commissioners own employees, from the moment when the procedure for database registration starts to the authorisation of data transfer, there is an average period of at least 6 to 8 months.

Therefore, it is a prudent business decision for a company planning to set up operations in Serbia that require data transfer to initiate the procedures for authorization on the first day after they receive their company registration from the Serbian Business Registers Agency.

By Marija Oreski Tomasevic, Partner, and Dusan Dincic, Senior Associate, SOG / Samardzic, Oreski & Grbovic

Serbia Knowledge Partner

Karanović & Nikolić is a leading international legal practice in South East Europe that offers unrivalled regional and sector specific coverage to investors. As a market leading practice, our dedication, quality legal service, and in-depth understanding of the needs of our clients stands out as a differentiating factor. With over 100 advisors across the region, our original values remain an integral part of our philosophy and approach to client work. Karanović & Nikolić has been involved in many of the largest and most complex transactions in the region and we take pride in our reputation as a regional transactional and corporate/commercial legal powerhouse.

Because we have an active business presence in Bosnia & Herzegovina, Croatia, Macedonia, Montenegro, Serbia and Slovenia, we operate seamlessly across all of these jurisdictions, providing regional services to our clients, while taking into consideration local particularities in order to provide the best legal advice under competitive terms. Renowned for the quality of our lawyers and our commercial approach to solving problems, Karanović & Nikolić advises many of the leading companies, banks, investors and government institutions doing business in the SEE region.

All News about, and Legal Analysis by, Karanovic & Nikolic can be found here.

Firm's website: https://www.karanovic-nikolic.com/


Our Latest Issue