The Agency for Identification Documents, Registers and Data Exchange of Bosnia and Herzegovina (IDDEEA) informs the public that, with the consistent application of the new Personal Data Protection Act of BiH—fully aligned with the GDPR and European standards—the long-standing practice enabling lawyers and private companies outside BiH to directly obtain personal data of BiH citizens for the purpose of collecting fines incurred in other countries has been discontinued.
Thousands of such requests were processed monthly outside clearly defined procedures, under the former Personal Data Protection Act, which resulted in uncontrolled disclosure of data and financial harm to BiH citizens. This practice has now been completely terminated.
From now on, all requests for data exchange related to misdemeanor cases will be processed exclusively through mechanisms of international legal assistance.
This means that, as of today, no lawyer, private company, or any foreign natural or legal person will be able to obtain citizens’ data directly from IDDEEA in relation to committed violations, as was previously the case.
Any exchange of data related to violations potentially committed by BiH citizens in other countries may only be carried out through clearly defined mechanisms.
The Law on International Mutual Legal Assistance in Criminal Matters—which also applies to misdemeanors—clearly prescribes that data exchange must take place exclusively through state channels between ministries of justice or other competent authorities. IDDEEA will strictly enforce this law and uphold each of its provisions.
In parallel with protecting the personal data of BiH citizens from unauthorized foreign entities, IDDEEA has developed a new web service (application) for the needs of the Border Police of BiH.
The application provides the Border Police with real-time access to all violations committed by each vehicle with foreign registration plates on the territory of BiH, ensuring that persons with outstanding obligations cannot leave Bosnia and Herzegovina until their violations are resolved.
This approach simultaneously:
- protects the privacy and personal data of BiH citizens, and
- ensures efficient control of violations committed within BiH.
This is a modern, digital, and fully integrated system that combines security, legality, and accountability.
IDDEEA emphasizes that these steps are part of a broader reform process intensively implemented over the past two years. For years, the Agency was neglected, undervalued, and misused, with numerous processes unresolved for up to twenty years. The current management is simultaneously working along two lines:
- correcting inherited errors and irregularities
- developing new digital solutions, security mechanisms, and identity services in line with European standards
Despite limited financial and human resources, as well as frequent decision-making blockages, IDDEEA continues to implement reforms in the interest of the state and its citizens.
The Agency stresses that it will firmly oppose all attempts at abuse, misinformation, and pressure coming from individuals and structures that benefited from previous irregular practices. IDDEEA will no longer serve private interests, but will remain a professional and modern state institution focused solely on law, security, and citizens’ rights.
Through these reforms, Bosnia and Herzegovina is introducing a higher standard of personal data protection, ensuring lawful international cooperation, and implementing effective mechanisms for controlling violations at its borders.
IDDEEA remains committed to strengthening the integrity of state institutions, developing modern digital solutions, and protecting the interests of all citizens of Bosnia and Herzegovina.
