Albania: IDP issues administrative action against AKEP and AMA for unauthorised disclosure of personal data
The Office of the Information and Data Protection Commissioner ('IDP') announced, on 29 December 2021, its decision to issue an administrative action against the Authority for Electronic and Postal Communications ('AKEP') and the Audiovisual Media Authority ('AMA') following unauthorised disclosure of personal data of citizens.
Background to the case
The IDP highlighted that the case relates to the publication of personal data of the citizens employed both in the public and private sectors.
Findings of the IDP
In particular, the IDP stressed that publication of personal data on the internet, or by media outlets, violates the legal principles and provisions regarding processing, and amounts to a personal data breach under the Law on the Protection of Personal Data No. 9887 of 10 March 2008.
Furthermore, the IDP stressed that the personal data breach may have serious implications for the private, professional, and family life of citizens and constitutes a serious violation of the fundamental rights and freedoms sanctioned in the Constitution of Albania.
Accordingly, the IDP requested effective and timely cross institutional cooperation to discontinue further dissemination of personal data online and/or through the media.
You can read the press release here.