IDP

The Information and Data Protection Commissioner (IDP) is the national supervisory authority of the Republic of Albania, in charge of supervising and monitoring the protection of personal data both in public and private sectors and for guaranteeing the right to access public information.

The protection of personal data is a fundamental right in the Albanian Legislation enshrined in Article 35 of the Constitution of Albania

The IDP has the power to conduct administrative investigations, to order for the blocking, erasure, destruction or suspension of the unlawful processing of personal data, and to impose administrative sanctions. The IDP Commissioner has different responsibilities such as giving opinions on legal acts, recommendations for the implementation of the law, authorizing international transfers, addressing complaints and it further performs tasks relating to international cooperation, awareness-raising activities, trainings, etc.   

The Commissioner’s Office was established in 2008 with the Law No. 9887, dated 10/03/2008 “On the Protection of Personal Data”, as amended by the Law No. 48/2012

Since 2008 the Office of the Commissioner has adopted a number of Instructions and Regulatory decisions for the protection of personal data with relevance to different areas such as:

  • Education
  • Health
  • Banking-finance
  • Video-surveillance
  • Hotels and Tourism
  • Statistics
  • Biometric data
  • Media
  • Publication of court decisions
  • Direct marketing

The IDP is member of the:

Consultative Committee of the Convention 108 (T-PD)

Observer to the European Data Protection Board (EDPB)

International Conference of Data Protection and Privacy Commissioner (ICDPPC)

Conference of European Data Protection Authorities

Francophone Association of Personal Data Protection Authorities (AFAPDP)

Central and Eastern European Data Protection Authorities (CEEDPA)

International Working Group on Data Protection in Telecommunications (Berlin Group)

Global Privacy Enforcement Network (GPEN), etc.

Important landmarks:  
1999 – First law on the protection of personal data established as a competence of the People’s Advocate;      
2004 – Assembly of Albania adopts the Law No. 9288, dated 7.10.2004 thereby ratifying the CoE Convention 108 and its Additional Protocol;       
2006 – Assembly of Albania adopts the Law No. 9590 “On Ratification of the Stabilisation and Association Agreement between the Republic of Albania and European Communities and their Member States”, whereas Article 79 sets forth the obligation to harmonize the national data protection framework with the acquis;      
2008 – Assembly of Albania enacts the Law No. 9887, dated 10.03.2008 “On the Protection of Personal Data”, repealing the law of 1999 and establishing the independent public authority “Commissioner for the Protection of Personal Data”. This law was drafted in line with the Convention 108 and its Additional Protocol and Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data;     
2014 – Assembly of Albania enacts the Law No. 119/2014 “On the Right to Information” thus empowering the Commissioner’s Office with the competence to enforce the right of access to information being produced or held by public sector bodies.     
www.idp.al Komisioneri KDIMDP @IdpAlbania IDP Ankesa
LAW No. 9887 dated 10.03.2008
ON PROTECTION OF PERSONAL DATA
View