The Commissioner for Information of Public Importance and Personal Data Protection assessed as good and useful the reaction of the Pension and Disability Insurance Fund after the Warning he sent the Fund for irregularities in processing personal data of the insured.

When the insured requested the issuance of certificates they need for enrolling their children in preschool institutions, the Fund issued them, instead of certificates, a copy of the complete M4 form, for which there was no legal basis, which additionally and unnecessarily exposed personal data of the insured to risk of abuse, given that M4 form contains more personal information than it is required and necessary.

The Fund, within the period specified in the Warning, informed the Commissioner that it immediately after receiving the Warning ceased such practice and in the future it will issue only certificates containing required, necessary data.

The Fund also informed the Commissioner that the Fund will initiate holding the meeting with representatives of the City of Belgrade, which is the founder of preschool institutions, as well as with other entities that require certificates containing data from its register, to clearly define and bring into line their requests, regarding the type and extent of necessary information, with the fundamental principles of the Law on Personal Data Protection, such as appropriateness and proportionality.