The Agency for Personal Data Protection in Bosnia and Herzegovina ('AZLP') published, on 9 September 2022, its draft medium-term work plan for the period of 2023 to 2025. In particular, pursuant to its powers and competencies under the Law on the Protection of Personal Data No. 49/06 ('PDPL'), the AZLP noted that it plans to monitor the implementation of the PDPL, promote personal data protection in order to strengthen public awareness, and cooperate with other authorities in order to adopt European and global standards into domestic legislation and practice. In this regard, the AZLP indicated that it plans to implement the following, among other things:

• monitor important developments, particularly the development of information and communication technologies and commercial practices;
• adopt Standard Contract Clauses ('SCCs');
• approve Binding Corporate Rules ('BCRs');
• determine and maintain a list of processing for which a Privacy Impact Assessment ('PIA') would be required;
• encourage the development of codes of conduct, including providing opinions and approval;
• encourage the establishment of certification mechanisms and corresponding criteria; and
• create and publish the criteria for the accreditation of the body responsible for monitoring codes of conduct.

You can download the draft plan, only available in Bosnian, here.