OneTrust DataGuidance confirmed, on 13 November, with Alex Petrovic, Senior Partner at Joksović, Stojanović & Partners, that the amended Law on Information Security (Official Gazette of the Republic of Serbia, No. 6/2016, 94/2017 i 77/2019) ('the Law') was published in the Official Gazette on 31 October 2019 and came into force on 8 November 2019. In particular, the Law regulates measures against security risks in information and communications systems, as well as setting out the responsibilities of legal entities in the management and use of information and communication systems.  

You can read the Law, only available in Serbian, here.