Law on Personal Data Protection, agency, supervision and penal provisions

Law on Personal Data Protection, arts. 47-74 (agency, supervision and penal provisions)

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

What follows is LexLint's own research summary of this law, not legal advice.

Commencement not set.

An enforcement supervision rule binding public and private bodies.

As of 19 September 2026.

What it requires

Expect a person in Montenegro to be able to submit a request for protection of rights to the Agency for Personal Data Protection and Free Access to Information, which must decide within 60 days and may temporarily ban further processing meanwhile, under Article 47.
Expect a person in Montenegro to have a civil damages claim against you under Article 48 for a breach of their rights under this law, separate from an administrative complaint to the Agency.
Give the Agency's controllers access to your filing systems, files and electronic processing means on request, regardless of the level of data secrecy, under Articles 65 to 67, and comply with an Agency order to eliminate irregularities, stop unlawful processing, erase unlawfully collected data, or stop an unlawful transfer or entrusting of personal data, under Article 71.
Expect a fine of ten to three hundred times the minimum wage in Montenegro for an authority, legal person or entrepreneur, or one to twenty times the minimum wage for the responsible individual, for violating a duty this law imposes, under Article 74.

If you get it wrong

Criminal exposureNo

Private right of actionYes

Who enforces it

Enforcement body

Agency for Personal Data Protection and Free Access to Information (AZLP), Montenegro's autonomous and independent supervisory authority established under Article 49 of the Law on Personal Data Protection, with legal personality.

What it reaches

Obligation class

Reporting, Governance

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

Article 47 lets a person who alleges a breach of rights under this law submit a request for protection of rights to the Agency, which must decide within 60 days, and lets the Agency temporarily ban further processing on the applicant's written request while a likely breach is pending decision. Article 48 entitles a data subject to compensation from the controller for damage suffered from a breach of rights under this law, under the general rules on compensation of damage.

Article 49 sets up the Agency for Personal Data Protection as the supervisory authority, autonomous and independent, with legal personality, and Articles 65 to 73 give the Agency's controllers the right of access to filing systems, files and electronic processing means regardless of the level of data secrecy, and let the Agency, on finding unlawful activity, order that irregularities be eliminated, impose a temporary ban on unlawful processing, order the erasure of unlawfully collected data, and ban an unlawful transfer or entrusting of personal data.

Article 74 fines an authority, legal person or entrepreneur ten to three hundred times the minimum wage in Montenegro, and a responsible individual one to twenty times the minimum wage, for violating the duties this law imposes.

When LexLint raises it

crawls_web
trains_models
deploys_chatbot
high_risk_decisions

Read the law

70/09-consolidated English translation hosted by the Agency for Personal Data Protection and Free Access to Information (azlp.me)
read in full (54,193 characters, not truncated)

Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.

Back to the example · Lint your app