Trains models, in Serbia
Each law's tag says when it binds: since in force proposed proposed
Criminal Code, Offences Against the Security of Computer Datasince 3 lines
Krivicni zakonik (Criminal Code), Official Gazette RS No. 85/2005 et seq., Arts. 298-304a · Read the law's page
- Do not access a computer, computer network, or electronic data processing system by circumventing a protection measure, without authorisation.
- Do not use, record, or further distribute data obtained by circumventing a protection measure without authorisation.
- Do not delete, alter, damage, or conceal computer data or a program without authorisation.
Draft Law on Personal Data Protection (2026 reform)proposed3 lines
Draft Law on Personal Data Protection, Ministry of Justice of the Republic of Serbia, public consultation opened · Read the law's page
- Under the draft, a controller may train an AI system on personal data on a legitimate-interest basis only in exceptional cases where that interest overrides the rights of data subjects.
- Under the draft, a controller operating video surveillance may keep footage for no longer than six months, and may not monitor employees' work absent narrow exceptions.
- Under the draft, a controller using a high-risk AI system must complete a data protection impact assessment and obtain the Commissioner's opinion, and must label synthetically generated or modified audio and video content.
Draft Law on Personal Data Protection (2026 replacement)proposed4 lines
Ministry of Justice of the Republic of Serbia, draft published for public consultation (consultation closes )
- This measure is proposed and binds nobody yet; what follows is what it would require if it is enacted in this form.
- Train AI on personal data under a legitimate-interest legal basis only in exceptional cases where that interest overrides data subject rights.
- Cap video-surveillance data retention at six months.
- Comply with restrictions on workplace video monitoring.
Draft Law on Artificial Intelligence (Serbia)proposed0 lines
Working Group draft under the Ministry of Science, Technological Development and Innovation; reported near-final and slated for public discussion mid-July 2026, not yet tabled in the National Assembly as of this review
Law on Copyright and Related Rights, Right of the Database Producerin force3 lines
Zakon o autorskom i srodnim pravima, Arts. 137-140v (Right of the Database Producer), Official Gazette RS No. 104/2009, 99/2011, 119/2012, 29/2016 and 66/2019 · Read the law's page
- Do not extract or re-utilise the whole or a substantial part, in quantitative or qualitative terms, of a database's contents without the database producer's authorisation.
- Do not systematically extract or re-utilise insubstantial parts of a database's contents where doing so conflicts with the database's normal exploitation or unreasonably prejudices the producer's legitimate interests.
- A lawful user of a database made available to the public may extract or re-utilise insubstantial parts for any purpose without the producer's authorisation.