AI regulation in Bosnia & Herzegovina (2026)

Bosnia and Herzegovina has enacted no standalone AI statute and no binding national AI strategy at state level. Analytical reports and UNDP assessments confirm the absence of a coherent state-wide AI regulatory framework as of 2025–2026.

A new GDPR-aligned Personal Data Protection Law was published in the Official Gazette on 28 February 2025 and entered into full application on 4 October 2025. It restricts automated decision-making and mandates Data Protection Impact Assessments for high-risk processing — currently the primary statutory AI-adjacent rule in force.

The Federation entity's development strategy identifies AI development and application as a top priority for economic growth, but this is a planning document, not a regulatory or legally binding instrument.

As an EU candidate country, BiH faces growing expectation to align with the EU AI Act. The European Commission's 2024 Enlargement Report highlights BiH's early-stage digital readiness and the need for regulatory harmonisation; failure to align risks exclusion from the EU's single digital market.

UNDP is working jointly with the Ministry of Communications and Transport to promote responsible AI use in public administration and to launch dialogue on applying EU AI policy in the human-rights context. Approximately 70% of state-level civil servants already use AI tools, but ~95% have received no formal training.

BiH's constitutional structure — two entities (Federation BiH and Republika Srpska) plus Brčko District — means no single authority can adopt binding state-wide AI policy. Reports consistently identify this fragmentation and weak inter-entity coordination as the principal obstacle to coherent AI governance.