The right to privacy is one of the fundamental human rights that serves to realize a man as a social being and protect the private spheres of their life. Even though this right can be looked at in different ways, due to the modern development of information and communication technologies, it is largely related to personal data and their availability to other persons. In that sense, the right to privacy is also protected via personal data protection. The basis for such protections in Serbian law has already been implemented in the Constitution of Serbia, and by adopting a new Personal Data Protection Law, the legislator has shown their determination to intensify and expand that protection. As it relates to criminal justice protection, a separate criminal offence of unauthorized collection of personal data is prescribed in Article 146 of the Criminal Code. The authors of this scientific paper will try to expose the threat to the right to privacy and personal data, and to give a clearer picture of how criminal justice protection of these values is realized in the Serbian law by presenting the elements of the aforementioned crime.