Montenegro. Comprehensive data protection. Act
ZZPL 2008Law on Personal Data Protection (Zakon o zaštiti podataka o ličnosti), Official Gazette 79/2008 as amended (70/2009, 44/2012, 22/2017, 77/2024)
In force
Partly verified
Medium confidence. No verification notes recorded.§1Summary
- Synopsis
Montenegro's Directive 95/46-era data protection law, still applicable until the new GDPR-aligned law takes effect in March 2027. It covers processing principles, rights, registration of filing systems and supervision by the Agency.
- Key themes
- Unique features
Pre-GDPR model with low misdemeanour fines and registration of personal data filing systems.
- SaaS relevance
Applies to SaaS providers processing personal data in Montenegro until the 2026 Law applies.
§2Obligations
- Extraterritorial
- Limited
- Breach notification
- None general (sectoral under Electronic Communications Law)
- DPO
- Conditional
- Cross-border transfers
- Agency approval for non-adequate countries
- Maximum penalty
- €500–€20,000 for legal entities
§3Dates
- Key dates
- Adopted
- In force
- Last amended 2024-07-31 (77/2024); to be superseded when the 2026 Law applies (19 March 2027)
§4Text and authority
- Text
- Authoritative text cbcg.me
- Authority
- Agency for Personal Data Protection and Free Access to Information (AZLP)
§5Where it applies
- Domestic law of
- Montenegro
§6Sources and verification
- Sources consulted
- Verification
Medium confidence.
Partly verified
Medium confidence. No verification notes recorded.