Handles health records, in Bosnia and Herzegovina

Law on the Protection of Personal Data, arts. 10-12 (special categories, criminal-conviction data and children's consent) · Read the law's page

• Do not process personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union affiliation, genetic data, biometric data for unique identification, health data, or data about a person's sex life or sexual orientation, unless a listed exception in Article 11 applies, such as the person's explicit consent.
• Process personal data about a criminal conviction or offence only under the supervision of a public authority or where a special law authorizes it with safeguards for the person's rights, and keep any register of criminal convictions exclusively under a public authority's control, under Article 12.
• Treat a child's consent to an information-society service offered directly to them as lawful only from age 16, and below that age obtain or verify the consent of a parent, adoptive parent, or guardian, making reasonable efforts to confirm it given available technology, under Article 10.