MK-LPDP-2020
Law on Personal Data Protection
Personal Data Protection Agency
Personal Data Protection Agency
The Law on Personal Data Protection, Official Gazette No. 42/20, fully applied from 24 August 2021. It was amended by Official Gazette No. 294/21 and No. 101/25. The Personal Data Protection Agency supervises the law.
The law covers qualifying offers to and monitoring of people in North Macedonia by organisations established abroad. It contains GDPR-style duties for lawful bases, notices, individual rights, processors, records, security, breach reporting, DPIAs, DPOs and international transfers. The digital-consent age is 14, and rights requests normally have a one-month response period with a possible two-month extension.
The 2025 amendment added NATO member countries to specified transfer-related provisions. The authoritative 2025 text is in Macedonian and Albanian; the summary used here is based on that official text, not on an English translation.
Apply the GDPR-style baseline, then configure the age-14 rule, North Macedonian representative, local Agency procedures and the current transfer wording after the 2025 amendment.