🇲🇪Montenegro

Montenegro's current law is not a copy of the GDPR

Montenegro's Law on Personal Data Protection is available in an official consolidated text incorporating Official Gazette Nos. 79/08, 70/09, 44/12, 22/17 and 77/24. It contains consent, transparency, security, rights, supervision and transfer duties, but its operational model differs from the GDPR. The Agency for Personal Data Protection and Free Access to Information supervises it.

Distinctive national controls

The law can require appointment of a responsible person and advance notification of automated personal-data databases. Certain high-risk automated processing requires prior Agency approval. Separate provisions govern video surveillance, including workplace, residential and public-space use. Transfers may require prior approval unless a statutory exception applies.

Article 10 uses parental, adopter or guardian consent for minors without setting a standalone digital-consent age. The law does not contain the GDPR's general 72-hour personal-data-breach notification model, so organisations should not substitute a GDPR checklist for the Montenegrin text.