Page 51

info

review

znanje i iskustvo. U vezi s tim postavio je

Radiu i dodatno pitanje o mogunosti iz-

voza podataka o licnosti izvan Srbije, jer se

oni u slucaju meunarodnih kompanija i

korisenja racunarskog oblaka cesto cuvaju

u velikim centrima u inostranstvu. Drugim

recima, dozvoljava li zakon mogunost da

se podaci o licnosti drzavljana Srbije nalaze

na sistemima van njene teritorije i kakva su

ogranicenja?

Radi je odgovorio da je to vise pravno

nego tehnicko pitanje i da je taj prekogranicni

promet podataka naveden u pomenutoj kon-

venciji i direktivi EU. U pitanju je relikt iz

vremena kad su postojale granice, a o kojima

je u IT sektoru tesko govoriti. Bie tu ino-

vacija i u samoj evropskoj regulativi, ali kako

sada stvari stoje, iznosenje podataka podleze

odreenom rezimu. Podaci koji se dosta-

vljaju van granice radi korisenja ili cuvanja

ne podlezu nikakvom posebnom rezimu

ako se radi o zemljama koje su potpisale i

ratifikovale konvenciju 108, jer se smatra

da one imaju obezbeenu odgovarajuu

zastitu. Dozvola poverenika u tom slucaju

nije neophodna, ali ukoliko se radi o drugim

zemljama, iznosenje podataka se regulise

detaljnim ugovorom koji obezbeuje neo-

phodan nivo zastite i cesto zavisi od loka-

lnog stanja zastite podataka o licnosti i ljud-

skih prava. U Indiji, na primer, policija ima

prilicno velika ovlasenja, pa se u poslednje

vreme korisenje tamosnjih usluga sve vise

vraa u Evropu. U tom smislu Atos je dobar

izbor.

Posto je drzavna uprava jedan od

najveih korisnika IT servisa a uz to i veoma

razuena, Stoki je Dobrijeviu postavio pi-

tanje o planovima optimizacije pruzanja IT

usluga razlicitim korisnicima iz drzavne up-

rave, a posebno u kontekstu bezbednosti po-

dataka o licnosti i informacija od drzavnog

znacaja.

Dobrijevi: Raznolikost sistema u

drzavnoj upravi je prepoznata kao veliki pro-

blem, ali nase ministarstvo koje je nadlezno

za informaciono drustvo, nije nadlezno za

upravljanje infrastrukturom drzavnih or-

gana. Meutim, u nasoj nadleznosti je e-

uprava i mi idemo putem objedinjavanja

infrastrukture koja e drzavnim organima

sluziti za korisenje njenih resenja. Kreemo

se ka privatnom oblaku i radimo na centrali-

zovanju i sinhronizovanju sistema nabavke

opreme. Kroz projekat podrske reforme

drzavne uprave iz 2010. nabavljena je solid-

na kolicina opreme i softvera, i u saradnji s

Republickom upravom za zajednicke poslove

persons. They have the right to access all the

information mediums and all documents of

interest to determine compliance with legal

obligations.

Mr Stoki thus immediately pointed

out that Atos was pillars of the spread of these

ideas and that this event was one way to point

out to them and make relevant knowledge and

experience available. In relation to this, he

asked Mr Radi additional question related

to the possibility of exporting personal data

outside Serbia, since international companies

often use the cloud computing technology,

storing data in large data centres abroad.

In other words, does the Law approve the

possibility to store personal data of Serbian

citizens in systems out of its territory and

what are the limitations?

Mr Radi said that it was morea legal

than technical issue and that the trans-

boundary data traffic was specified in the

said Convention and the EU directive. It is

a relic from the time when there were limits,

and which it is hard to talk about in the

IT sector. There will be innovations in the

European regulations as well, but according

to the current state, data "exporting" is

subject to a specific regime. Data exported

over borders for using or storing purposes is

not subject to any regime unless countries

that signed and ratified the Convention 108

are involved, because it is considered that

they have appropriate protection ensured.

The approval from the Commissioner in that

case is not necessary, but if other countries are

involved, data export is regulated by detailed

agreement which ensures appropriate level of

protection and often depends on local state of

personal data and human rights protection.

For example, in India, the police has quite

broad authority, thus lately the application of

services there keep returning to Europe more

and more. In that sense, Atos is a very good

choice.

Since the state administration is one

of the largest users of IT services and very

varied as well, Mr Stoki asked Mr Dobrijevi

a question related to the plans regarding

the optimization of IT services provision to

various users from the state administration,

and especially in the context of safety of

personal data and information of national

importance.

Mr Dobrijevi: Diversity of the system

at the state administration is recognized

as a major problem, but the Ministry

for Information Technologies is not is

responsible for managing the infrastructure