Data Protection (GDPR)
Personal data protection duties for businesses under the Law on Personal Data Protection and the GDPR.
3 articles
Articles in this topic
Personal Data Protection (GDPR) for Businesses in North Macedonia
If your business handles personal data — of customers, employees or website visitors — the Law on Personal Data Protection applies. It mirrors the EU GDPR: lawful bases, data-subject rights, breach notification within 72 hours, and fines of up to 4% of annual income.
Do You Need a Data Protection Officer (DPO)?
Not every business must appoint a Data Protection Officer. The law makes it mandatory in three situations — most often when your core activity involves large-scale, regular monitoring of people or large-scale processing of sensitive data.
Video Surveillance (CCTV) Rules for Businesses in North Macedonia
If your business uses CCTV, you must adopt a formal act governing the surveillance, post a visible notice, and delete footage within 30 days. Video surveillance is regulated personal-data processing — here is what compliance requires.