Bosnia and Herzegovina’s Personal Data Protection Agency has issued a permanent ban against IDDEEA, the agency responsible for identification documents, registers, and data exchange. The ban prevents IDDEEA from processing personal data to issue qualified electronic certificates for electronic signing. The restriction excludes the agency’s use of digital signing specifically related to identification documents themselves. This decision stems from concerns regarding data protection practices. The agency can continue limited digital signing within the scope of identification document procedures. Further details regarding the reasoning behind the ban have not been immediately released. The ruling impacts the issuance of digital certificates used for various online transactions and services.