/ Basic info / Legal instruments / Forum   / News    / Internet & Privacy / Contacts   / Links
Personal Data Protection Agency in Bosnia and Herzegovina

Contents:
  1. Legal grounds for the protection of personal data in the national legislation
  2. The status and the legal position of national DPA
  3. The legal rights and the limitations of the national DPA
  4. Contact information

1) Legal grounds for the protection of personal data in the national legislation:

Constitution of Bosnia and Herzegovina Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data (ETS. 108) 28.01.1981. Additional Protocol to the Convention for the Protection of Individuals with Regard to Automatic Processing of Personal Data,Regarding Supervisory Authorities and Transborder Data Flows Law on Protection of Personal Data („Official Gazette of Bosnia and Herzegovina“ 49/06, 76/11 and 89/11)

2) The status and the legal position of national DPA:

The Agency is an independent administrative organization established for the purpose of ensuring the protection of personal data and is headed by its Director.

3) The legal rights and the limitations of the national DPA:

The Agency shall act with complete independence in carrying out the duties entrusted to it.

Tasks falling under Agency’s competence are:

  • to supervise the implementation of this Law and other laws on personal data processing;
  • to act on data subject’s complaints;
  • submission to the Parliamentary Assembly of Bosnia and Herzegovina of an annual report on protection of personal data, which should be available to the public
  • to follow the personal data protection requirements by giving proposals as to enacting or amending legislation governing the data processing, give opinions on the proposed laws and take care of fulfilment of the criteria relevant to data protection originating from international treaties that are binding for Bosnia and Herzegovina.

The Agency shall have powers to:

  • perform supervision, through inspection, over fulfilment of obligations stipulated by this law;
  • keep the Central Registry;
  • accept incentives and complaints of citizens concerning breaches of this Law;
  • adopt implementing regulations, guidelines or other legal documents in line with the Law;
  • order blocking, erasing or destroying of data, temporarily or permanent ban of processing, issue warning or reprimand to the controller;
  • file a request for filing the misdemeanour proceedings pursuant to this Law;
  • provide advice and opinions in the area of personal data protection;
  • co-operate with similar authorities in other countries;
  • exercise other duties as foreseen by law;
  • supervise the transfer of the personal data out from Bosnia and Herzegovina;
  • impose a penalty in the infringement proceedings, in accordance with this law.

Control Carried Out by the Agency

When the Agency observes an unlawful processing of data, it shall require the controller to discontinue the processing as well as order different measures. The controller shall take the necessary measures without any delay and inform the Agency in writing within 15 days thereof. In the exercise of its functions the Agency may request from a controller or processor to furnish the Agency with information on any matter, and may inspect any documents and records likely to bear personal data. Agency is entitled to enter any premises where data are being processed. The property and premises of non-statutory data controllers may only be entered and inspected during business hours. State and official secrets shall not prevent the Agency from exercising its rights stated in this Article, but the confidentiality provisions shall also be binding for the Agency. Upon its request, all authorities shall be obliged to support the Agency in carrying out its duties.

4. Contact information

Personal Data Protection Agency in Bosnia and Herzegovina
Dubrovačka 6
71000 Sarajevo
Bosnia i Herzegovina
Tel: +387 33 726 250
Fax: +387 33 726 251
E-mail: azlpinfo@azlp.ba
www.azlp.ba




  The administrator of this web site is:
Personal Data Protection Office
ul. Stawki 2; PL-00-193 Warszawa
Phone: +48 (22) 531 03 00, Fax: +48 (22) 531 03 01, e-mail: kancelaria@uodo.gov.pl