Law: Law on Protection of Personal Data 2018 (Official Gazette of the Republic of Serbia, No. 87/2018 (only available to download in Serbian here) ('the Law')

Regulator: Commissioner for Information of Public Importance and Personal Data Protection ('Poverenik')

Summary: The Law is the main piece of data protection legislation in Serbia, and is supplemented by decrees and rulebooks. Poverenik has released guidelines, frequently asked questions, and checklists related to the Law. Poverenik has also issued its support in favour of Serbia ratifying the Protocol amending the Convention for the Protection of Individuals with Regard to Automatic Processing of Personal Data ('Convention 108'). In addition, the Law on Information Security (No. 6/2016, 94/2017, 77/2019) (only available in Serbian here) is Serbia's comprehensive cybersecurity law and is aligned with the Directive on Security Network and Information Systems (Directive (EU) 2016/1148) ('the NIS Directive').