Cybersecurity Policy Report, New Bosnia-Herzegovina Data Protection Law Aligns With GDPR, (Mar 4, 2025)
By Tony Foley
A new privacy and data protection law published by the Bosnia-Herzegovina Parliamentary Assembly in the Official Gazette on Friday is designed to align the country’s law with the provisions of the European Union’s General Data Protection Regulation (GDPR).
The new law, which was approved by the House of Representatives on Jan. 23 and the House of Peoples on Jan. 30, prescribes rules relating to the protection of natural persons with regard to the processing of personal data and establishes provisions governing the free movement of such data. Among the new provisions contained in the law, which replaces a prior law enacted in 2006, are the following:
Conferring new consumer rights to be informed about the processing activities of data controllers, as well as a right to data portability;
Providing for mandatory notifications of data breaches to the Personal Data Protection Agency (AZLP) within 72 hours of discovering the breach;
Establishing rules related to international transfers of personal data;
Requiring data protection impact assessments under specified conditions; and
Mandating the appointment of a data protection officer (DPO) where statutory provisions requireit.
The law will enter into force on the eighth day after its publication in the Gazette (March 8) and will begin to be applied 210 days from that date (Oct. 4).
News: InternationalLegislation DataPrivacy DataBreach GDPR