PERSONAL DATA PROCESSING BY THE POLICE IN SERBIA: ASSESSING COMPLIANCE WITH CONSTITUTIONAL, ECHR AND EU LAW STANDARDS

10.51204/Anali_PFBU_26203A

The protection of natural persons regarding the processing of their personal data is a fundamental human right recognised in international and national law. Data protection principles and rules should be respected even when personal data is processed by law enforcement agencies. For the interpretation of this constitutionally guaranteed right, the standards from the case law of the European Court of Human Rights on data protection under Article 8 of the European Convention on Human Rights are relevant. In addition, the harmonisation of national legislation with EU rules on personal data processing for law enforcement purposes also serves to protect this right. The author analyses the domestic legal framework for data processing by the police, in order to establish whether and to what extent the national legal system has achieved compliance with the constitutional guarantee of the right to data protection, ECtHR standards and EU acquis.

1. Aidinlis, Stergios, David Barnard-Wills, Leanne Cochrane, Krzysztof Garstka, Agata Gurzawska, Joshua Hughes. 3/2024. Between GDPR and Law Enforcement Directive in Security Research: The Use of Personal Data by Law Enforcement Authorities. European Journal of Law and Technology 15: 1–25.
2. Bonetto, Giacomo. 1/2024. The judgment of the CJEU in Inspektor (Purposes of the processing of personal data – criminal investigations) of 8 December 2022 and the concept of further processing under the Law Enforcement Directive. New Journal of European Criminal Law 15: 58–71.
3. De Hert, Paul, Juraj Sajfert. 31/2021. The fundamental right to personal data protection in criminal investigations and proceedings: framing big data policing through the purpose limitation and data minimisation principles of the Directive (EU) 2016/680. Brussels Privacy Hub Working paper 7: 1–17.
4. Dimitrova, Diana, Paul de Hert. 1/2025. Real Transparency and Real Oversight of Law Enforcement Data. The ECHR and the Lack of Accountability of Indirect Access Procedures. Utrecht Law Review 21: 49–69.
5. Directorate General Human Rights and Rule of Law. 2022. Case law of the European Court of Human Rights concerning the protection of personal data, T-PD(2023)1. https://rm.coe.int/caselaw-march-24-april/1680ab0b7e, last visited February 15, 2026.
6. Đorđević, Đurđica. 2/2025. Legal framework, criminal and misdemeanor protection of the right to personal data protection in the Republic of Serbia. Facta Universitatis: Law and Politics 23: 155–169.
7. Drechsler, Laura. 2020. The Achilles Heel of EU data protection in a law enforcement context: international transfers under appropriate safeguards in the law enforcement directive. 47–65 in Cybercrime: New Threats, New Responses, Proceedings of the XVth International Conference on Internet, Law & Politics, edited by Joan Balcells et al. Barcelona: Huygens Editorial.
8. Drechsler, Laura. 2/2021. Wanted: LED adequacy decisions. How the absence of any LED adequacy decision is hurting the protection of fundamental rights in a law enforcement context. International Data Privacy Law 11: 182–195.
9. European Commission. 2022. Communication from the Commission to the European Parliament and the Council, First report on application and functioning of the Data Protection Law Enforcement Directive (EU) 2016/680 (‘LED’), COM(2022) 364 final.
10. European Court of Human Rights. 2018. Guide on Article 8 of the European Convention on Human Rights. https://rm.coe.int/guide-on-article-8-of-the-european-convention-on-human-rights/16808e67cb, last visited February 15, 2026.
11. Funta, Rastislav, Peter Ondria. 2/2021. Data Protection in Law Enforcement and Judicial Cooperation in Criminal Matters. TalTech Journal of European Studies 11: 148–166.
12. Hudobnik, Matthias. 3/2020. Data protection and the law enforcement directive: a procrustean bed across Europe? ERA Forum 21: 485–500.
13. Leiser, Mark R., Bart Custers. 3/2019. The Law Enforcement Directive: Conceptual Issues of EU Directive 2016/680. European Data Protection Law Review 5: 367–378.
14. Leiser, M.R., Bart Custers. 2024. Article 5: Time limit for storage and review. 153–163 in The EU Law Enforcement Directive (LED): A Commentary, edited by Eleni Kosta, Franziska Boehm. Oxford: Oxford University Press.
15. Milidragović, Dragan, Nenad Milić. 98/2023. Normiranje novih policijskih ovlašćenja u Zakonu o policiji. Zbornik radova Pravnog fakulteta u Nišu 62: 135–153.
16. Ministry of Justice of the Republic of Serbia. 2025. Starting basis for the preparation of the draft Law on the protection of personal data. https://ekonsultacije.gov.rs/topicOfDiscussionPage/446/3, last visited March 26, 2026.
17. Petrović, Dragana. 4/2022. Privatnost i zaštita podataka o ličnosti – krivično-pravni aspekt. Strani pravni život 66: 469–489.
18. Petrović, Zlatko 1/2024. Video-nadzor i zaštita podataka o ličnosti u Republici Srbiji. Savremene studije bezbednosti 57–82.
19. Pisarić, Milana, Ostoja Kalaba. 1/2025. Data Retention and Criminal Procedure in Serbia. Annals of the Faculty of Law in Belgrade 73: 83–121.
20. Prica, Miloš. 78/2018. Jedinstvo pravnog poretka kao ustavno načelo i zakonsko uređivanje oblasti pravnog poretka – ujedno izlaganje o unutrašnjem pravnom sistemu. Zbornik radova Pravnog fakulteta u Nišu 58: 103–125.
21. Poverenik za informacije od javnog značaja i zaštitu podataka o ličnosti. 2022. Izveštaj o radu za 2021. godinu. https://www.poverenik.rs/images/stories/dokumentacija-nova/izvestajiPoverenika/2021/Izve%C5%A1taj_LATfinal.pdf, last visited February 15, 2026.
22. Poverenik za informacije od javnog značaja i zaštitu podataka o ličnosti. 2026. Izveštaj o radu za 2025. godinu. https://www.poverenik.rs/images/stories/dokumentacija-nova/izvestajiPoverenika/2024/godisnji_izvestaj_2025.pdf, last visited March 26, 2026.
23. Ružić, Nevena, Ana Toskić Cvetinović. 2020. Analiza propisa koji uređuju sektor bezbednosti iz aspekta zaštite podataka o ličnosti. Belgrade: OSCE Mission to Serbia. https://serbia.osce.org/sr/node/473001, last visited May 29, 2026.
24. Simović, Darko, Slobodan Orlović. 2023. Komentar Ustava Republike Srbije sa praksom Ustavnog suda Republike Srbije i Evropskog suda za ljudska prava. Belgrade: Službeni glasnik.
25. Sekulić, Miloš, Gordan Grujić. 3/2020. Krivičnopravna zaštita ličnih podataka. Glasnik Advokatske komore Vojvodine 92: 347–378.
26. Sunde, Inger Marie. 4/2023. To have or have not: Limiting the data available for subsequent use by the police. New Journal of European Criminal Law 14: 495–511.
27. Te Molder, Ruben, Masha Fedorova, Marieke Dubelaar, Sjarai Lestrade. 4/2023. The principle of purpose limitation in data-driven policing: A guiding light or an empty shell? New Journal of European Criminal Law 14: 512–533.
28. Vogiatzoglou, Plixavra, Thomas Marquenie. 2022. Assessment of the implementation of the Law Enforcement Directive. Luxembourg: Publication Office of the EU. https://www.europarl.europa.eu/RegData/etudes/STUD/2022/740209/IPOL_STU(2022)740209_EN.pdf, last visited May 29, 2026.