The local legal context
An AI or digital-service project in Bosnia and Herzegovina needs the state data-protection framework alongside intellectual-property, consumer and relevant sector rules. The 2025 privacy law is a material part of that review. Entity-specific employment or business requirements may also matter, while EU AI obligations require their own territorial analysis rather than automatic domestic application.
Classify what the system actually does, who supplies it and whose interests may be affected. Review the allocation of data, intellectual property, security and performance obligations in the technology contract. Automated decisions may also engage employment, consumer or sector rules. Keep human review and incident handling proportionate to the intended use, and preserve records supporting important deployment decisions.
Key laws & official sources
Provides the state-level 2025 personal-data framework and the agency’s responsibilities; application and implementing measures require current checking.
Collects national copyright, industrial-property and related instruments; ownership and enforcement require the relevant right and territorial analysis.
Confirm the operative Bosnia and Herzegovina rules, dates and competent authority; this preparation guide does not determine the outcome of an individual matter.
Practical next steps
- Map state data duties and entity-specific deployment requirements.
- Allocate data, IP and security obligations
- Document testing and human oversight
Documents to prepare
- Product description and system architecture
- Supplier contracts and data-flow records
- Risk assessments and deployment timeline
How Jurisiti can help
Describe what the system actually does, who develops it and who uses its outputs. AI, privacy, cybersecurity, consumer and sector-specific rules can overlap without sharing the same scope or commencement date. Allocate responsibilities in contracts while checking the current applicable phase of any regulatory framework.
- Software, cloud and outsourcing contracts
- AI systems, roles and governance
- Platform duties and cyber incident planning
Questions about your matter
How do I start a technology, ai & digital services enquiry in Bosnia and Herzegovina?
Identify the jurisdiction, the people involved, any existing proceeding or deadline, and the result you need. A short chronology and the key documents help define the proposed engagement before local professional arrangements are confirmed.
Can a cross-border matter involve more than one legal system?
Yes. Bosnia and Herzegovina may be one part of a wider matter involving another place of residence, contracting party, asset or forum. Applicable law, jurisdiction and enforcement should be assessed separately, using the relevant national and international rules.
Does this guide establish a lawyer-client relationship?
No. An enquiry or use of this guide does not establish an engagement. Conflicts, professional authority, scope, responsibilities and fees must be confirmed before work is undertaken.
These guides provide general legal information. The operative law, deadlines, professional permissions and scope of work are confirmed for the particular matter. Representation is arranged through appropriately authorised local practitioners.