Nerguti emphasized that the Commissioner’s Office has played a key role in advancing Albania’s EU integration, from bilateral meetings and strategic measures to the adoption of the new Personal Data Protection Law in December 2024. Fully aligned with the EU’s GDPR, the law fulfills one of the 14 interim benchmarks for accession, with its practical implementation now representing the main challenge.

The implementation of the “Law on the Protection of Personal Data” remains a real challenge for many businesses in Albania, as this process is still ongoing.
Dhimitër Shuli, Vice-Chair of the Digital Committee of the American Chamber of Commerce, addressed the practical challenges faced by businesses in implementing the Law on Personal Data Protection. He highlighted several key issues, including societal and managerial mindsets, the shortage of qualified human and technical resources, and the disorganized storage of data across platforms such as WhatsApp, USB drives, and laptops without a structured system. Additional challenges include difficulties in accessing external expertise, the lack of standardized documentation and data registers, inadequate backup procedures, and shortcomings in the coordination and planning of human resources. Shuli emphasized that effective implementation of the law requires comprehensive staff training and systematic collection of records, noting that many companies remain at the early stages of compliance.

Pjerina Mema, Director General for Data Protection at the Office of the Commissioner, emphasized that while the obligations established by the law are not entirely novel, the new legislation places particular emphasis on the accountability of data controllers in both the public and private sectors. It mandates that they conduct a prior assessment of potential risks associated with the processing of personal data and implement appropriate measures to mitigate such risks.
/e.xh/r.e/a.f/sm/