Personal data processing must be based on law
In his letter sent to the Minister of Finance, the Commissioner for Information of Public Information and Personal Data Protection reminded that he carried out an inspection of compliance with the law in all commercial banks in the Republic of Serbia (29) because of collecting of clients' data for the purpose of cooperation with the USA tax authorities in implementation of their FATCA and because of possible transborder transfer of data out of the Republic of Serbia. After the inspection of compliance with the Law, the Commissioner sent a warning that in the absence of a signed and ratified FACTA agreement, there is no valid legal basis or purpose for such data processing and particularly that transborder transfer of personal data would constitute a serious, punishable offence under Article 57 of the Law on Personal Data Protection.