GDPR — General Data Protection Regulation
The GDPR (General Data Protection Regulation) is the European Union regulation on the protection of personal data. It sets out the principles, rights and obligations that apply when personal data is processed. It has applied since 25 May 2018 and has set high standards of privacy and transparency in handling personal data. Its aim is to give individuals more control over their own data and to make organisations more accountable for protecting it.
Why the GDPR matters
The GDPR applies to organisations in the EU, and also to organisations outside it — including companies in Serbia — that offer goods or services to people in the EU or monitor their behaviour there. Non-compliance can lead to heavy fines and reputational damage. Compliance shows that an organisation takes responsibility towards its users, and builds trust with clients and partners.
Who must apply the GDPR
Within those limits, the GDPR applies to every kind of organisation that collects, processes or stores personal data — companies, public bodies, non-governmental organisations, e-commerce platforms and marketing agencies. Organisations in Serbia are in any case subject to the Law on Personal Data Protection (Zakon o zaštiti podataka o ličnosti), which is modelled on the GDPR. That law also covers companies outside Serbia that offer goods or services to people in Serbia or monitor their behaviour there, and they usually have to appoint a representative in Serbia.
Steps to GDPR compliance
- Analysing how personal data is processed, and identifying the risks.
- Preparing the privacy policy and internal procedures.
- Determining the legal basis for each processing activity.
- Appointing a data protection officer (DPO), where this is required or useful.
- Appointing a representative in the EU, where the GDPR requires one (Article 27).
- Training staff and checking compliance.
Benefits of GDPR compliance
- Avoiding heavy fines.
- More trust from clients and partners.
- Transparent and ethical business.
- Better protection of users’ personal data.
- A competitive advantage in the EU market.
How STANDARDISO can help
STANDARDISO supports you throughout the GDPR compliance process. Our team analyses how you process data, prepares the necessary documentation, drafts privacy policies and trains your staff. Our aim is to help you meet your legal obligations and protect your organisation’s reputation. Everyone on our team works in English, and we can prepare your documentation in English, Serbian or both.