Data Protection

After the adoption of the General Data Protection Regulation (GDPR) and the Law on Personal Data Protection (LPDP), which followed as a result of harmonizing the legislation of the Republic of Serbia with the European legislation, a need arose to help clients in Serbia, and particularly to those companies that are a part of business groups based in a EU country, which handle numerous personal data and/or process such data by the nature of their business, to harmonize their business, their business processes and policies with the requirements of the then new legislation. Responding to such client needs, we focused on this area and advised numerous clients regarding the implementation of the new legislation.

Some of the major banks in Serbia, the largest oil company, and the largest telecommunications operator hired us to help them harmonize their business, i.e., their internal acts and other documents with the requirements of LPDP, but also with the requirements imposed by GDPR itself. Our engagement included the analysis of their relevant documentation, i.e. internal acts and other documents, and the analysis of all processes for which we previously determined that they included handling and/or processing of personal data. Based on conducted analyses, we prepared reports on compliance of the clients’ business with the requirements of LPDP and GDPR which also contained action plans for the elimination of observed deviations as their integral part. In the next stage, we helped clients to eliminate the observed deficiencies by implementing action plans from our reports: we changed the existing internal acts and other documents to adjust them to the requirements of the then new legislation or created completely new ones as needed.

The acquired experience allows us to provide daily, continuous consulting pertaining to the matters in the field of personal data protection.