Decision on Amendments to the Decision on the Central Credit Register of Business Entities and Natural Persons in Bosnia and Herzegovina

Based on Article 2, paragraph (3), items c) and i), Article 7, paragraph (1), item b), and Articles 59 and 70 of the Law on the Central Bank of Bosnia and Herzegovina ("Official Gazette of BiH", nos. 01/97, 29/02, 8/03, 13/03, 14/03, 9/05, 76/06, and 32/07) and Articles 8 and 9 of the Law on the Protection of Personal Data ("Official Gazette of BiH", no. 12/25), the Governing Board of the Central Bank of Bosnia and Herzegovina, at its 4th meeting held on April 27, 2026, adopts

DECISION on amendments to the Decision on the Central Credit Register of business entities and natural persons in Bosnia and Herzegovina

Article 1. In the Decision on the Central Credit Register of business entities and natural persons in Bosnia and Herzegovina ("Official Gazette of BiH", nos. 44/19, 77/21, and 40/24), paragraphs (3) and (4) of Article 9 are amended and read as follows:

"(3) Participants in the register, referred to in paragraph (1), item b) of this Article, may access data from the Central Credit Register through direct inspection exclusively with the consent of the natural person or business entity, with the identity of the consent provider clearly established. (4) The consent referred to in paragraph (3) of this Article implies any freely given, specific, informed, and unambiguous expression of will by the data subject, when they indicate their agreement to the processing of data relating to them by a statement or by a clear affirmative action. The processing of data based on the consent of a natural person shall be carried out in the manner determined by the regulation on the protection of personal data."

Article 2. In Article 10, paragraphs (4), (5), and (6) are amended and read as follows:

"(4) Upon the request of a natural person or business entity, banks, microcredit organizations, savings-credit organizations, leasing companies, factoring companies, and any other company under the jurisdiction of the relevant entity banking agency may issue individual reports from the Central Credit Register. The participant issuing individual reports from the Central Credit Register is obliged to notify the Central Bank thereof and issues reports only for the natural person or business entity that submitted the request. (5) A natural person or business entity submits the request referred to in paragraph (4) of this Article in a manner that expresses consent for the processing of data in accordance with Article 9, paragraph (4) of the Decision, and in which the identity of the request submitter can be clearly established. (6) The request referred to in paragraphs (4) and (5) of this Article is valid only for one access to data from the Central Credit Register."

Article 3. (1) This Decision enters into force on the eighth day from the date of its publication in the "Official Gazette of BiH". (2) This Decision shall also be published in the "Official Gazette of the Federation of Bosnia and Herzegovina", the "Official Gazette of the Republika Srpska", and the "Official Gazette of the Brčko District of BiH".

Chairperson Number: UV-122-02-1-735-3/26 Governing Board of the Central Bank Sarajevo, April 27, 2026 Bosnia and Herzegovina

GOVERNOR

dr. Jasmina Selimović