The Personal Data Protection Agency of Bosnia and Herzegovina has permanently banned the Agency for Identification Documents, Registers, and Data Exchange of Bosnia and Herzegovina – IDDEEA, from processing personal data for the purpose of issuing qualified electronic certificates for electronic signing, except in the procedure of digital signing in the field of identification documents.
The Personal Data Protection Agency of Bosnia and Herzegovina also permanently banned the Indirect Taxation Agency from processing personal data for this purpose.
The Agency stated that the procedure was initiated against IDDEEA regarding the processing of BiH citizens’ personal data for the purpose of issuing electronic identities, as well as the processing of visitors’ and employees’ personal data through a biometric control and search system.
Within this framework, IDDEEA is prohibited from issuing electronic identities to BiH citizens without legal grounds, and has been ordered to erase all personal data collected during the system’s testing phase.
The Agency stated that this decision was upheld by the Court of Bosnia and Herzegovina, as well as its Appellate Administrative Chamber.
