Here is the honest situation. Bosnia and Herzegovina's Law on the Protection of Personal Data establishes a data protection regime overseen by the Personal Data Protection Agency. It requires a lawful basis and consent, the processing principles, the data subject rights, registration of filing systems with the Agency, stricter conditions on special category data, security measures and confidentiality, and safeguards for cross-border transfers. Building that program and evidencing it to the Agency is real work, and a controller that never registered its filing systems or has no transfer safeguards is exactly where controllers fall short.
This Kit removes the guesswork. It is every obligation written as an adopt-ready control you personalize in a weekend, with the evidence the Personal Data Protection Agency examines.
What you get, the moment you buy
Grounded in the Bosnia and Herzegovina Law on the Protection of Personal Data, with the processing principles, consent and information, the data subject rights, the registration of filing systems, special category data, security and cross-border transfer called out. Editable Word and Excel files.
What one control looks like
This is scope, the processing principles and the key definitions, where compliance begins. All 18 are built to this depth.
Why this is not another template pack
- The evidence is the point. A duty you cannot evidence is exposure to the Agency. This tells you what is examined and where controllers fall short, for every obligation.
- Registration, rights and security built in. The registration of filing systems, the data subject rights and the security duties are written into the controls, the substance the law requires.
- Built on a mapped compliance corpus, not one person's opinion, from a graph of thousands of controls across standards.
- It compounds. The law follows the European data protection model, so this work feeds a broader Western Balkans and multi-jurisdiction privacy program.
Who buys this
Any organization processing personal data in Bosnia and Herzegovina, and the privacy, legal and compliance leads who own it. Whether it is a first assessment or a market entry, you save weeks and walk in with the principles, registration and evidence structured.
Common questions
Is it really editable? Yes. Word and Excel files you own and adapt. No portal, no subscription.
Is this legal advice? No. It is an implementation toolkit grounded in the law. For a specific matter consult local counsel; this gets your controls and records in order fast.
Does it cover registration? Yes. Keeping and registering filing systems with the Personal Data Protection Agency is built as a control.
Does it cover cross-border transfer? Yes. The adequacy assessment and the transfer safeguards are built as controls.
What if it is not for me? A 30-day money-back guarantee.
Instant digital download · 30-day money-back guarantee · The Art of Service Pty Ltd, GPO Box 2673, Brisbane QLD 4001 · support@theartofservice.com