June 08, 2010

Central Registry of Personal Data Database

The Central Registry of Personal Data Database in Serbia was established on May 14, 2010.

As of May 15, 2010 all data processors (physical or legal entities or governmental bodies that processes the data, i.e. undertakes any action in connection with data, such as collection, recording, multiplying, copying, retrieval, organization, storage, adaptation or alteration, alignment or combination, consultation, use, disclosure by transmission, dissemination or otherwise making available, blocking, erasure or destruction or otherwise making unavailable, whether or not by automatic, semi-automatic, or other means) are obliged to submit the record on personal data database they have formed for registration with the Central Registry.

The form and manner of keeping the records is regulated under the Decree on the Form and Manner of Keeping Records on Processing of Personal Data. The records can be filed electronically by logging to the official web page of the Registry http://registar.poverenik.rs or by filing the record directly with the Commissioner for Information of Public Importance and Personal Data Protection.

Furthermore, for data bases that are yet to be established, each Personal Data Processor is required to inform the Controller of its intent to start the processing of personal data or to create a data base, as well as to provide the Controller with the relevant information, 15 days prior to the beginning of the processing of personal data or of the creation of the data base.

The data base itself should be registered with the Central Registry within 15 days as of the beginning of the processing. The Commissioner should be notified of any change in the existing records on personal data database and recording in the registry within 15 days as of the day when the change has been made.

The fines for the data collection and processing contrary to the provisions of the Law on Personal Data Protection range from RSD 50,000 to RSD 1,000,000.