Albania
SubstantialLaw No. 9887 on the Protection of Personal Data (2008, amended 2014)
Authority: Information and Data Protection Commissioner | Enforcement: Active | Enacted: March 2008
Overview
Albania enacted data protection legislation in 2008, amended in 2014 to align more closely with the EU framework. The Information and Data Protection Commissioner actively oversees compliance. Albania is an EU candidate country.
14-Topic Coverage
Data Protection Authority
Fully AddressedInformation and Data Protection Commissioner oversees compliance and enforcement.
Consent Requirements
Fully AddressedConsent required for processing. Must be free, specific, and informed.
Data Subject Rights
Fully AddressedRights to access, rectification, erasure, and objection.
Cross-Border Transfer
Fully AddressedTransfers to countries with adequate protection or with appropriate safeguards.
Breach Notification
Partially AddressedNo explicit statutory requirement. Commissioner guidance developing.
DPO Requirements
Partially AddressedMust notify Commissioner of processing activities.
Children's Data
Partially AddressedGeneral provisions apply.
Penalties & Enforcement
Fully AddressedAdministrative fines. Active enforcement by Commissioner.
Sector-Specific Rules
Partially AddressedBOA financial data rules, health data regulations.
Cookie/Tracking
Partially AddressedE-Communications Act addresses electronic consent.
AI & Automated Decisions
Partially AddressedRight to not be subject to automated decisions.
Data Localisation
Not AddressedNo general data localisation requirement.
Significant Data Fiduciary
Not AddressedNo equivalent concept.
Government Data
Fully AddressedLaw applies to government processing.
Coverage Summary
Quick Navigation
Need Compliance Help?
Our data privacy team can help you navigate Albania's regulations.
Book a Consultation