Law on Personal Data Protection (LPDP), special categories, a child's consent and biometric, health and genetic data

Zakon za zastita na licnite podatoci, arts. 12-14, 84 (special categories, a child's consent and biometric, health and genetic data)

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

What follows is LexLint's own research summary of this law, not legal advice.

In force since 24 August 2021.

A sensitive categories rule binding public and private bodies.

As of 19 September 2026.

What it requires

The processing of a child's personal data for an information society service offered directly to the child is lawful where the child is at least 14 years old, or, if younger, only where a parent or another holder of parental responsibility has given or authorised the consent; make reasonable efforts to verify that consent, taking available technology into account.
Get the Agency's prior approval before processing health data, genetic data or biometric data of a person in North Macedonia, including where the processing rests on the data subject's own explicit consent, unless the processing is determined by a law that itself provides safeguards or the genetic data is processed by an expert for preventive medicine, diagnostics or treatment.
Because Article 122 suspends Chapter II except Article 12 until North Macedonia's accession to the European Union, Article 13's prohibition on processing special categories of personal data and Article 14's rule confining criminal conviction data to official control do not currently bind.
Once Chapter II takes effect, do not process a special category of personal data unless one of Article 13's exceptions applies, such as the data subject's explicit consent, a necessity ground tied to employment or social security law, vital interests, or an important public interest carried out with suitable safeguards.
Once Chapter II takes effect, process personal data relating to criminal convictions and offences only under the control of an official authority, or under a law that provides appropriate safeguards for the rights and freedoms of data subjects.

What it reaches

Obligation class

Prohibition, Consent, Age verification, Biometric

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

Article 12 makes the processing of a child's personal data for an information society service offered directly to the child lawful only where the child is at least 14 years old, or, if younger, only where a parent or another holder of parental responsibility has given or authorised the consent, and requires the controller to make reasonable efforts to verify that parental consent given the available technology.

Article 84 requires the Agency's prior approval before processing health data, genetic data or biometric data of a person in North Macedonia, including where the processing rests on the data subject's own explicit consent, unless the processing is determined by a law that itself provides safeguards, or the genetic data is processed by experts for preventive medicine, diagnostics or treatment.

Article 122 suspends Chapter II except Article 12 until North Macedonia's accession to the European Union, so Article 13's general prohibition on processing special categories of personal data and its list of lawful exceptions, and Article 14's rule confining criminal conviction data to official control, do not currently bind.

Article 13 would otherwise prohibit processing special categories of personal data absent a listed exception, such as the data subject's explicit consent, a necessity ground tied to employment or social security law, vital interests, the legitimate activities of a non-profit body, or an important public interest with suitable safeguards.

Article 14 would otherwise confine processing personal data relating to criminal convictions and offences to processing under the control of an official authority, or under a law providing appropriate safeguards.

When LexLint raises it

crawls_web
trains_models
generates_content
deploys_chatbot
automated_outreach
processes_biometrics
serves_minors
handles_health_records

Read the law

Base law text hosted by the Agency for Personal Data Protection (azlp.mk), read in full (202,535 characters, not truncated)

Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.

Back to the example · Lint your app