Serbia: Announced Commissioner for Personal Data Protection investigation into Meta over alleged unauthorised data processing for AI development

On 14 August 2024, the Commissioner for Information of Public Importance and Personal Data Protection announced an investigation into Meta for unauthorised data processing for Artificial Intelligence (AI) development. The Commissioner highlighted that Meta’s new privacy policy, which has been effective since 26 June 2024, involves processing personal data for AI development without informing users in Serbia. The Commissioner seeks to address the issue by requiring the companies to ensure they appoint representatives in Serbia and comply with local data protection laws. The Commissioner is also engaging with the Data Protection Commission of Ireland as the data protection authority with territorial jurisdiction and the European Data Protection Board for alignment with EU regulations on data protection. A joint meeting with data protection authorities from Bosnia and Herzegovina and Montenegro is also scheduled for 4 September 2024 to find a coordinated resolution.