SerbiaLaw on Electronic Communications, Security and Integrity of Public Networks and Services
Zakon o elektronskim komunikacijama ("Sl. glasnik RS", br. 35/2023), čl. 157(1)-(4) i 169
In force since .
A sector security regimes rule binding private bodies.
- Instrument type
- an act of a legislature
- Obligation class
- Security, Governance
As of .
What it requires
- This binds a business entity (privredni subjekt) that provides public electronic communications networks or services under the Law on Electronic Communications, regulated by the Regulatory Body for Electronic Communications and Postal Services (RATEL) (art. 157; reached by declaring that you provide telecom services).
- Apply adequate technical and organizational measures, proportionate to the existing risks, to ensure the security and integrity of public networks and services, including measures to prevent and minimize the impact of security incidents on users and interconnected networks and to keep services running (art. 157(1)).
- Where there is a special risk of breach of security and integrity, tell your users of the risk and, if it is beyond the measures you must apply, of the possible protective measures and their costs (art. 157(3)).
- Give the Regulator the data it requests to assess the security and integrity of your networks and services, and submit to an extraordinary inspection after a significant breach (art. 157(8)).
These lines are LexLint's reading of the law's text, as of .
If you get it wrong
Criminal exposureNo
Private right of actionNo
Penalty structure
Article 169(1)(47) fines a legal person 500,000 to 2,000,000 dinars for a misdemeanor of not acting in accordance with Article 157 on the security, integrity and continuity of public networks and services.
- Rule
- Fixed only
- As of
- Minimum
- 500,000
- Currency
- RSD
- Fixed cap
- 2,000,000
Who enforces it
Enforcement body
Regulatorno telo za elektronske komunikacije i poštanske usluge (RATEL), the Regulatory Body for Electronic Communications and Postal Services
Settledness
- As of
- Open questions
- Has the Regulator's rulebook on the security and integrity of public networks and services, drafted for consultation in 2024, been adopted?
What this law does
Article 157(1) requires a business entity to apply adequate technical and organizational measures proportionate to the existing risks to ensure the security and integrity of public electronic communications networks and services. Article 157(3) requires the business entity to notify users of a special risk of breach of security and integrity and of possible protective measures.
Article 157(8) lets the Regulator request data on the security of networks and services and carry out an extraordinary inspection after a significant breach. Article 169 fines a legal person 500,000 to 2,000,000 dinars for a misdemeanor of not acting in accordance with Article 157.
When LexLint raises it
When your app profile says your app provides telecom services.