In Serbia, under the DP Act, any notice regarding data protection has to contain information about the name and address or business name of the data controller or the identity of another person responsible for PII processing; the purpose of PII collection; the manner in which the PII will be used; the identity or categories of the users of the PII; the mandatory nature of, and the legal basis for, the processing; or, the voluntary nature of providing the PII; the individual’s right to withdraw his or her consent; the individual’s rights in the case of unlawful processing. What else do companies conducting business in Serbia need to know?
