At it’s session held on August 7th, 2026, the Government of Montenegro adopted the Draft Personal Data Protection Act, aimed at aligning Montenegro’s existing data protection framework with European Union standards.
For companies that collect, process, or store personal data, the new legislation introduces stricter obligations and increased oversight regarding the handling of users’ personal information.
The New Personal Data Protection Act establishes more rigorous requirements for data processing, applying to both public and private sector entities. Organizations will be required to implement stronger compliance measures and ensure greater accountability in the management of personal data.
In addition, the responsibilities of data controllers have ben expanded. Under the new rules, any suspected personal data breach must be reported to the competent authority within 72 hours.
Special attention is given to the protection of minors. The Act requires prior parental consent for the processing of personal data relating to children under the age of 16.
One of the most significant aspects of the new legislation is the introduction of substantial financial penalties for non-compliance. Fines may range from €150 to as much as €2,000,000 depending on the nature and severity of the violation.
Overall, the new Personal Data Protection Act is designed to strengthen the protection of personal information and enchance privacy rights in the digital era.