This type of communication between political entities and citizens in the Republic of Serbia during pre-election campaigns has been recurring for years
In recent days, citizens have contacted the Commissioner, claiming that unknown individuals directly contacted them, stated they were acting on behalf of specific political entities, and claimed to possess the citizens’ personal data.
The Commissioner notes that this form of communication between political entities and citizens during pre-election campaigns in the Republic of Serbia has persisted for years; furthermore, for over a decade, the Commissioner has continuously urged all political entities not to misuse citizens’ personal data while advising citizens that they can and should exercise their rights in the manner prescribed by law.
In accordance with the Law on Personal Data Protection, any political entity possessing data on a citizen it contacts—whether by telephone or by visiting their home address—is required, no later than the moment of initial contact, to provide that citizen with clear information regarding data processing, including, among other things, the source from which the data was collected. Furthermore, to exercise the right to information and other rights related to personal data processing, citizens may submit a relevant request to the political entity that contacted them. Forms for such requests can be found on the Commissioner’s website at: poverenik.rs.
If the political entity fails to respond to a citizen’s request within the statutory 30-day period, the citizen may file a complaint with the Commissioner—using the form available at the same website—or file a lawsuit seeking the protection of rights and compensation for damages with the Higher Court having jurisdiction over the area where the political entity is headquartered, or where the data subject has their permanent or temporary residence.