Status
In force
Consent model
Opt-in
Primary law
Law on Personal Data Protection
Year
2020
Authority
Agency for Personal Data Protection
Marketing consent
GDPR-modeled bases and consent standard.
Transfers
Transfer rules follow the GDPR model of adequacy, appropriate safeguards and narrow derogations.
Penalties
Fines are set as a percentage of turnover, on the GDPR model.
The framework
North Macedonia's framework rests on the Law on Personal Data Protection, adopted in 2020, with the Agency for Personal Data Protection as the supervisory authority.
That puts North Macedonia in the global opt-in majority, where permission comes before processing and marketing waits for consent.
Key instruments
Law on Personal Data Protection
2020 · In force
North Macedonia's 2020 law is a close GDPR transplant, with the transition period long expired; treat it as an EU-style jurisdiction.
Marketing and advertising
GDPR-modeled bases and consent standard. In practice that means consent before tracking or marketing outreach, documented well enough to show a regulator.
Cross-border transfers
Transfer rules follow the GDPR model of adequacy, appropriate safeguards and narrow derogations.
Enforcement and penalties
Fines are set as a percentage of turnover, on the GDPR model.
Cite this page: "North Macedonia Data Privacy Laws." Digital Privacy Regulations, September 28, 2026, https://digitalprivacyregs.com/north-macedonia.html. Accessed [date].