Law on Personal Data Protection, transfer of personal data from Montenegro

Law on Personal Data Protection, arts. 41-42 (transfer of personal data from Montenegro)

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

What follows is LexLint's own research summary of this law, not legal advice.

Commencement not set.

A cross border transfer rule binding public and private bodies.

As of 19 September 2026.

What it requires

Obtain the prior consent of the Agency for Personal Data Protection and Free Access to Information before transferring personal data of a person in Montenegro to another country or to an international organisation, under Article 41, unless one of the Article 42 exceptions applies, including transfer to an EU or EEA Member State or a country on the EU adequacy list, the data subject's informed consent, or performance of a contract.
Assess the adequacy of protection in the destination country against the nature of the data, the purpose and duration of the processing, the countries of origin and destination, and the rules of law and security measures in force there, under Article 41, paragraph 2.

What it reaches

Obligation class

Transfer

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

Article 41 permits personal data to be transferred from Montenegro to another country, or given to an international organisation that implements the safeguards this law requires, only with the prior consent of the supervisory authority, with the adequacy of the protection assessed against the nature of the data, the purpose and duration of the processing, the countries of origin and destination, and the rules of law and security measures in force there.

Article 42 lists nine cases in which that consent is not mandatory, including a separate law or treaty providing for the transfer, the data subject's informed prior consent, performance of a contract, protecting the data subject's life, a transfer from a public register, an important public interest or legal claim, and a transfer to a Member State of the European Union or European Economic Area, or to a country on the European Union's adequacy list.

When LexLint raises it

crawls_web
trains_models
deploys_chatbot

Read the law

70/09-consolidated English translation hosted by the Agency for Personal Data Protection and Free Access to Information (azlp.me)
read in full (54,193 characters, not truncated)

Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.

Back to the example · Lint your app