In response to information regarding the sale of scanned passports on illegal internet platforms (so-called “dark web”), the Agency for Identification Documents, Registers, and Data Exchange of Bosnia and Herzegovina (“IDDEEA”) emphasises that such abuses are most often caused by individuals’ carelessness when using and storing personal documents, rather than a compromise of official databases. IDDEEA informs citizens that all personal data in official registers are protected at the highest security level and that there is no risk of data misuse from official databases.
The Law on Protection of Personal Data of Bosnia and Herzegovina, as well as other relevant regulations, clearly defines who and under what circumstances may request a copy of personal documents. Copying and scanning of personal documents is permitted only to authorized institutions and organizations in compliance with the legal basis and for precisely specified purposes. We particularly note that hotels, travel agencies, and other private organizations do not have the legal right to retain copies of personal documents without an explicit legal basis. They have the right to establish personal identity and record the name and surname, as well as the purpose of the visit, which constitutes the minimum data provided to these organizations, but there is no obligation to leave personal documents at the hotel reception, etc.
IDDEEA reminds citizens of the following measures to protect personal documents:
- Careful handling of documents: Do not share scanned or photographed copies of passports and other personal documents, especially online and through unverified services. Unknown online services may pose a risk.
- Report lost or stolen documents: If a passport is lost or stolen, immediately report the case to the relevant authorities so that the document can be officially canceled and potential misuse prevented.
- Verify identity when providing data: Be cautious about to whom and for what purposes you provide data from your documents. Irresponsible sharing may lead to misuse attempts.
IDDEEA continuously improves security standards and applies the latest technological measures to ensure the integrity of personal data of citizens of Bosnia and Herzegovina. Any suspicion of personal data and/or document misuse should be reported to the relevant authorities.
In this regard, IDDEEA encourages and urges citizens to use digital signatures as a secure and reliable method of authentication in online communication with institutions and the private sector. By using a digital signature, citizens can reduce the risk of personal data misuse, identity theft, and unauthorized access to their documents. We emphasize that a digital signature enables faster and more efficient completion of administrative tasks with no need for physical presence or submission of personal documents, further improving the protection of privacy and user data.