Law / Bosnia and Herzegovina

Law on the Protection of Personal Data of Bosnia and Herzegovina, biometric data processing

Law on the Protection of Personal Data, arts. 57a-57b (biometric data processing)

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

What follows is LexLint's own research summary of this law, not legal advice.

In force 12 months, effective 4 October 2025.

A biometric privacy rule binding public and private bodies.

As of 19 September 2026.

What it requires

  • Obtain the person's explicit consent before processing a biometric identifier for the individual secure identification of a service user, and only where the processing is otherwise required by law or necessary to protect a person, property, classified information, or a trade secret, and the person's conflicting interests do not prevail, under Article 57a.
  • Obtain an employee's explicit consent before processing their biometric data to record working time or to control entry to and exit from official premises, and offer it only where required by law or as an alternative to another recording or access method, under Article 57b.

What it reaches

Obligation class

Biometric, Consent

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

Article 57a permits processing biometric data only where required by law or necessary to protect a person, property, classified information or a trade secret, or for the individual secure identification of a service user, provided the person's conflicting interest does not prevail, and Article 57a(2) makes the person's explicit consent the legal basis for processing their biometric data for secure identification.

Article 57b permits processing an employee's biometric data to record working time or to control entry to and exit from official premises only where required by law or offered as an alternative to another recording or access method, and only with the employee's explicit consent.

When LexLint raises it

  • processes_biometrics
  • processes_voice

Read the law

Official English-language statute PDF hosted by the Agency for Statistics of Bosnia and Herzegovina (bhas.gov.ba)
read in full (207,438 characters, untruncated)

Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.

Back to the example  ·  Lint your app