01
Wed, Apr
62 New Articles

Personal Data Transfer Out of Serbia – a New Area of Legal Practice

Personal Data Transfer Out of Serbia – a New Area of Legal Practice

Serbia
Tools
Typography
  • Smaller Small Medium Big Bigger
  • Default Helvetica Segoe Georgia Times

In recent times, more and more international companies are outsourcing their call centres and data processing facilities to Serbia.

This has opened a practice area which has, until recently, been relatively unknown to Serbian law professionals – transferring of personal data out of Serbia.

If the data collected and stored in Serbia is transferred to a country that is a party to the Council of Europe Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data, the process is a simple one, possibly impeded only by technical matters.

However, if the data is to be transferred to a country not a party to the said Convention, among others USA, Canada and Australia, the process could turn out to be lengthy and demanding.

The transfer is supervised by the Commissioner for Information of Public Importance and Personal Data Protection. The Commissioner has the final saying on the demanded transfer and can authorise it or deny it.

In order to start the process, a company has to be registered as a personal data processor. This is done by registering at least one database with the Commissioner. This is done both on-line and in hard copy. It is an unwritten rule that the first database registered is an employee database.

For each database the Commissioner reviews legal basis for collection of the data and the justification of data collection. The legal basis and justification for data collection and transfer are under even more detailed scrutiny when it comes to data transfer outside of the Convention area.

The Commissioner has the discretionary right to deny a transfer if he deems it unjustified, or if he finds that the data security and the right of privacy of an individual will be put in jeopardy with the requested transfer. The consent forms are also put under detailed scrutiny, especially in cases where the Commissioner finds that the individual giving consent is not in position to refuse the consent, for example employees.

It is a common practice that a data transfer agreement and a consent form are redrafted several times before the consent is given.

According to unofficial estimates of the Commissioners own employees, from the moment when the procedure for database registration starts to the authorisation of data transfer, there is an average period of at least 6 to 8 months.

Therefore, it is a prudent business decision for a company planning to set up operations in Serbia that require data transfer to initiate the procedures for authorization on the first day after they receive their company registration from the Serbian Business Registers Agency.

By Marija Oreski Tomasevic, Partner, and Dusan Dincic, Senior Associate, SOG / Samardzic, Oreski & Grbovic

Serbia Knowledge Partner

Who we are

Karanovic & Partners is a regional legal practice in Southeast Europe with tradition spanning two decades and cooperating offices in Serbia, Croatia, Slovenia, Montenegro, Macedonia and Bosnia & Herzegovina. With more than 100 attorneys at law cooperating across the region, we take pride in our work, dedication and understanding of our clients' industries and needs.

What we do

We work with some of the most respected and reputable businesses in the world, banks, as well as governments, state-owned entities, startups and NGOs. We see our clients as long-term partners.

We focus on straightforward solutions and tailor-made advice. Lawyers cooperating with us are fully immersed in our clients’ culture and industry to ensure that the work is delivered intelligently and reliably.

What sets us apart?

In our company culture, excellence is a must. We are reliable, adaptive and fast.

Karanovic & Partners operates under the “one team” principle, combining our regional reach and local know-how to deliver coordinated legal advice necessary for achieving our clients’ goals.

All News about, and Legal Analysis by, Karanovic & Partners can be found here.

Firm's website: https://www.karanovicpartners.com/

 

Our Latest Issue