Processes biometric data, in North Macedonia

Zakon za zastita na licnite podatoci, arts. 12-14, 84 (special categories, a child's consent and biometric, health and genetic data) · Read the law's page

• The processing of a child's personal data for an information society service offered directly to the child is lawful where the child is at least 14 years old, or, if younger, only where the child's legal representative has given or authorized the consent; make a reasonable effort to verify that consent, taking available technology into account.
• Get the Agency's prior approval before processing health data, genetic data or biometric data of a person in North Macedonia, including where the processing rests on the data subject's own explicit consent, unless the processing is determined by a law that itself provides safeguards or the genetic data is processed by an expert for preventive medicine, diagnostics or treatment.
• Do not process a special category of personal data unless one of Article 13's exceptions applies, such as the data subject's explicit consent, a necessity ground tied to employment or social security law, vital interests, or an important public interest carried out with suitable safeguards.
• Process personal data relating to criminal convictions and offences only under the control of an official authority, or under a law that provides appropriate safeguards for the rights and freedoms of data subjects.