In July 2025, the Albanian Data Protection Commissioner adopted Guidance No. 05/2025 on the Processing of Personal Data by Competent Authorities (“Guidance”), marking an important step toward operationalising Law No. 124/2024, Albania’s GDPR-aligned data protection law. This guidance introduces essential obligations for authorities tasked with maintaining public order and national security, such as the police, prosecution, courts, and other public bodies involved in crime prevention or investigation.

As of 1 August 2025, the newly adopted Regulation on Additional Requirements for the Placement on the Market of Products Containing Palm Oil, Palm Fat, or Other Vegetable Oils and Fats (the “Regulation”) will come into effect in Serbia, marking a significant development in the regulatory framework at the intersection of food law and consumer protection.

Europe has already begun regulating deepfakes. The EU’s AI Act emphasises transparency, risk management and conformity assessments for high-risk AI, but does not create new individual rights against deepfake misuse. It requires providers of systems that generate or manipulate deepfake media to embed machine-readable markings (e.g. watermarks or metadata) flagging content as AI-created, and obliges deployers (platforms or publishers) to “clearly and distinguishably” label any deepfake outputs as AI-generated.

This summer, the Albanian National Assembly adopted a significant package of amendments to the Law on Foreigners, signalling a clear shift toward aligning national migration rules with key EU directives. While the legal changes are substantial, their purpose is broader: to simplify how Albania governs entry, residence, and work rights for foreign nationals, especially those from the European Union. The reform reflects both Albania’s political will to approximate the EU acquis and a growing recognition that the country must adapt to new demographic, labour, and mobility dynamics. While the amendments cover a wide range of areas, we highlight below the provisions most likely to impact foreign nationals and their interactions with Albanian institutions.

The fight against software piracy has entered its second phase, marking a significant shift from the earlier era of physical piracy to the current challenges of combating digital piracy.

In a significant development for the personal data protection landscape in Albania, the Council of Ministers has adopted Decision No. 347, dated 19 June 2025, establishing a new state database titled “Electronic Registry of Data Protection Officers” (DPO Registry). This marks a major milestone in the country’s efforts to align its data governance infrastructure with international and European standards, in line with the newly reformed legal framework on personal data protection.

On 2 June 2025, the European Commission (“EC”) imposed a substantial EUR 329 million fine on Delivery Hero and Glovo for their involvement in a cartel in the online food delivery sector.

Karanovic & Partners has advised Paysera North Macedonia on obtaining an Electronic Money Institution license.

Effective 1 October 2025, amendments to the Law on the Centralised Records of Beneficial Owners (UBO) in Serbia will introduce important new obligations for a broader range of entities.

The National Bank of Serbia (“NBS”) adopted the new Decision on the Minimum Requirement for Capital and Eligible Liabilities of a Bank (“New MREL Decision”), as part of a package of new or amended bylaws following the latest amendments to the Law on Banks. The New MREL Decision shall replace the existing decision of the same name (“Existing MREL Decision”) and shall apply starting from 1 October 2025.

As part of the broader effort to harmonise national legislation with the EU General Data Protection Regulation, the Albanian Data Protection Commissioner issued Instruction No. 2, dated 30 April 2025 (Instruction No. 2), on the protection of personal data in the health sector. This Instruction repeals the previous 2020 framework and establishes a comprehensive set of rules governing the collection, use, and disclosure of health and genetic data.

Serbia’s economy remains stable despite slower growth, with signs of renewed M&A activity, ongoing regulatory reforms, and progress in renewables and the capital market, according to Karanovic & Partners Partner Maja Jovancevic Setka.

In a progressive move towards formalising seasonal and occasional work, the Assembly of North Macedonia has adopted a groundbreaking law to regulate temporary employment across key sectors. This legislative development aims to streamline the hiring process for temporary workers while ensuring they receive essential social security benefits.

The Bank of Albania has introduced a new regulatory framework on marketing and advertising by financial institutions, significantly enhancing consumer protection and transparency in the financial sector. The changes, enacted through Decision No. 11, dated 5 February 2025, amend the Regulation “On Transparency for Banking and Financial Products and Services” and enter into force on 1 May 2025.

In The Corner Office, we ask Managing Partners at law firms across Central and Eastern Europe about their backgrounds, strategies, and responsibilities. This time around, we asked: For 2025, what is the one sector or industry in the country that shows the most promise for growth, and why?

Ilej & Partners, in cooperation with Karanovic & Partners, has advised Cirtuo on the sale to Coupa. Wolf Theiss, working with Kirkland & Ellis, advised Coupa on the deal.

On 14 May 2025, significant changes were made to North Macedonia’s personal data protection legislation. The Assembly of the Republic passed an amendment to expand the nations where personal data can be shared freely, without facing third-country transfer restrictions.

Consumer-focused litigation, especially relating to Swiss loan credit contracts, has driven significant growth in dispute resolution practices in Slovenia since 2022, according to Ketler & Partners, member of Karanovic Partner Minu Anamaria Gvardjancic. With the courts adopting a very proactive stance and wide interpretation of the impact of EU case law increasingly asserting consumers’ rights, disputes are expected to continue expanding in the coming months.