The Commissioner for Information of Public Importance and Personal Data Protection stated that the scandal in which PUC delivered bills which included amount not due for insurance to the citizens of Belgrade constitutes another proof of the irresponsible attitude of the public utility companies towards the citizens' personal data.
He reminded that public utility companies are not marketing agencies trying to benefit owing to the fact that they have a large database of citizens' personal data. In contrast, they are obliged to handle these data in a lawful manner and use them only for the purposes set out by law, and possibly for other purposes exclusively upon obtaining prior consent. The Commissioner Rodoljub Sabic also added:
"In addition to causing problems regarding the possible payments and refunds of the amounts not due, creating unsolicited "obligations" and necessary formalities for their annulment and the like, the actions of PUC Infostan are also a direct threat to the rights of citizens set out in the Law on Personal Data Protection. In this context, it is normal that the Mayor of Belgrade announced that he would seek that the critical item be omitted from the bill, but it is not normal that something like this is necessary in the first place and it will not be normal if this time again no one is held accountable.
In this regard, I remind that a few years ago (in September 2011) the Commissioner conducted supervision in PCU Infostan on a similar occasion, and accordingly issued a warning. Following that, the Commissioner sent a public warning to all utility companies. Infostan informed the Commissioner in writing that it will fully comply with the warning and cease the previous practice of delivering various promotional and advertising materials, offers for concluding contracts and the like.
I particularly emphasize that the elimination of violations is solely the obligation of PUC Infostan, and that this, under no circumstances, should result in unnecessary waste of citizens' time. Citizens are not required to sign any statements, to send emails, to wait at the counters, etc. They have the full right to demand the public utility companies to observe their legal rights.
The Commissioner will on this occasion also carry out the control procedure in PUC Infostan and take the follow up steps accordingly. However, the Commissioner warns that it would be completely irrational to expect the implementation of the Law on Personal Data Protection to be secured only by the Commissioner's control in, for instance, each of the huge number of utility companies. Everyone should contribute to the implementation of the law, especially the authorities who are also the founders of public utility companies. They must act very differently when it comes to the protection of personal data of citizens, and insist on accountability of anyone who threatens their rights."
