News

Commissioner Milan Marinović and Deputy Commissioner Sanja Unković are participating in the International Privacy Symposium, traditionally held in Venice for the fourth year in a row, from 12 to 16 May. At this symposium, which this year is attended by several hundred participants from all over the world, the Commissioner and Deputy Commissioner participated, along with seven other heads of Data Protection Authorities, including the Director of the Personal Data Protection Agency of Bosnia and Herzegovina, Dr. Dragoljub Reljić, in a panel dedicated to the current situation and forms of cooperation between Data Protection Authorities that are not members of the European Data Protection Board (which includes representatives of EU member states).

The Commissioner and Deputy Commissioner particularly promoted the idea of future ​​establishing of electronic association for all authorities engaged in personal data protection, especially those outside the EU, to deepen and make the existing cooperation more efficient and thus strengthen the position of these authorities, all for better personal data protection at a time of great challenges to this right imposed by the rapid-growing personal data processing via modern technologies, especially artificial intelligence.

The Privacy Symposium also discussed the relationship between personal data protection and artificial intelligence regulations, health data protection, data processing in "smart cities", and data protection on social networks.

From 7 to 9 May, the Commissioner's lecturers held three training sessions for Acibadem Bel Medic healthcare institution employees, attended by 75 employees. The training sessions focused on handling the personal data of users of their services and applying appropriate protection measures. Employees were introduced through practical examples to the risks and consequences of misusing personal data. In light of sectoral regulations in healthcare and the application of the provisions of the Personal Data Protection Law, several areas were detected where the regulations were not harmonized or did not provide clear guidelines for acting, the participants were provided with practical solutions. Among the most common questions was the issue of the justification for accessing personal documents to open a health record of a service user, where employees were presented with the processing principles of the Personal Data Protection Law (legal basis, purpose, minimization, time limit, data storage, accuracy).

During 2024, the Commissioner conducted a series of training courses for public health employees in 24 administrative districts and the City of Belgrade for around 400 employees. In 2025, the aim is to extend the training courses to employees in private health institutions.

Commissioner Milan Marinović and Deputy Commissioner Sanja Unković are participating in the 33rd European Conference of Data Protection Authorities, better known as the "Spring Conference", taking place from 6 to 9 May in Batumi, Georgia. The main topics of this conference are: personal data protection in the era of the increasing use of artificial intelligence with a special emphasis on the protection of children, health data protection, how "small" data protection authorities can deal with large personal data breaches, and how to strengthen cooperation between data protection authorities.

Commissioner Milan Marinović and Deputy Commissioner Sanja Unković participated in a meeting organized by the Personal Data Protection Agency of Montenegro on 12 April 2025 in Podgorica. In addition to the Commissioner and Deputy Commissioner, the meeting was attended by the highest representatives of the Agency for Personal Data Protection of Montenegro and the Personal Data Protection Agency of Bosnia and Herzegovina.

The topic of the meeting was the problem of nondesignation of representatives of the companies "Meta" and "X" for the protection of personal data in Serbia, Bosnia and Herzegovina and Montenegro, as well as changes to the privacy policies of these companies related to the processing of personal data for developing artificial intelligence, and, hence, a jointly coordinated approach of the three personal data protection authorities towards these companies.

The decision on a joint response was made to safeguard the right to personal data protection of persons from Serbia, Bosnia and Herzegovina, and Montenegro as efficiently as possible and thus equalize the position of our citizens in relation to this right with the position of persons from the European Union, to the extent possible.