By Marija Zdravkovic

After a public hearing that lasted more than a year, the National Assembly of the Republic of Serbia adopted the new Data Protection Law (the “Law“) on 9 November 2018.

Until the Law comes into force on 21 August 2019, the currently valid law will apply except for the provisions on the Central Register of Databases, which are no longer in force. Nevertheless, according to the published Notice of the Commissioner for Personal Data Protection (the “Commissioner“), the obligation to establish or register in already established databases still exists under Articles 48, 49 and 51 of the currently applicable law, as does the obligation to submit records of databases to the Commissioner.