Press Releases - Archive

The Commissioner for Information of Public Importance and Personal Data Processing has issued a warning to the Republic Geodetic Authority, in which he alerted that body to the fact that video recording of the admission offices of its cadastral services in Belgrade, Zemun, Niš and Novi Sad and live streaming of personal data, which makes personal data available to an unlimited number of Internet users, constituted unlawful processing of personal data.

There is no applicable law that would provide the grounds for this kind of personal data processing by the Republic Geodetic Authority. Likewise, just as this personal data processing is not authorised by any law, it is also not based on the consent of the data subjects whose presence in those rooms is recorded.

The Commissioner for Information of Public Importance and Personal Data Processing has finished the inspection of compliance with the Law on Personal Data Protection initiated pursuant to media reports about alleged sale of nursing mothers' personal data.

The inspection covered companies Medis Pharm and Care Direct. During the inspection, it was found that Medis Pharm had not used or managed a database of nursing mothers' personal data. While this company did distribute its materials, it did not do so directly, but through Care Direct, which distributed them under an agreement between the two companies to the addresses contained in a database it owned.

Prompted by media reports of sale of personal data, the Commissioner for Information of Public Importance and Personal Data Processing initiated an inspection of compliance with the Law on Personal Data Protection. The inspection procedure is currently an after is completion the Commissioner will, as usual, inform the public about the outcome and the measures he intends to undertake. The inspection procedure will include the companies that are currently known to have been involved in this case, namely Мedis Pharmi and Care Direct, but may be subsequently expanded to include other entities as well.

Care Direct had reported a data file named "Records of Nursing Mothers" to the Commissioner's Central Registry in early 2011. According to the report, Care Direct had been processing such data since 2003, i.e. before the effective date of the Law on Personal Data Protection. However, the records stated that data were used on the basis of consent of data subjects and there were no other data recipients.

The Commissioner for Information of Public Importance and Personal Data Processing has issued a Warning to the Ministry of Health, in which he drew the Ministry's attention to irregularities in the personal data processing it performs in the Integrated Health Information System (IHIS).

The Commissioner had previously ex officio initiated and conducted an inspection of compliance with and application of the Law on Personal Data Protection by the Ministry of Health of the Republic of Serbia in connection with the personal data processing that Ministry performs in the IHIS.