After a process that took more than five years, Serbia finally received a new Law on Personal Data Protection [in Serbian] - adopted by the National Assembly last November. The law closely follows EU’s General Data Protection Regulation (GDPR), almost to the point of literal translation into Serbian. That was expected, due to Serbia’s EU membership candidacy.

In reaction to the Cambridge Analytica controversy, Facebook has recently announced a substantial tightening of access restrictions to the APIs of Facebook, Instagram, and other platforms it owns. Researchers at leading international research organisations are deeply concerned about collateral impacts of the new API access rules. Here is why.