Albania
6 regulators · 13 laws & regulations · 9 obligations · 9 enforcement actions · 1 upcoming deadline
| Obligation | Timing | Regulator | Arises from | Source | Detail |
|---|---|---|---|---|---|
| All industries | |||||
| Lawful basis, notice and data subject rights | — | IDPC | Law No. 124/2024 "Për mbrojtjen e të dhënave personale" (Law No. 124/2024 on the Protection of Personal Data) | official | |
Art. 7(1) sets the lawful bases for processing and Art. 8 the conditions for consent. Arts 13-20 give data subjects the rights to information, access, rectification and erasure, to be forgotten, restriction, portability, objection, and rights concerning automated decisions. |
|||||
| Personal data breach notification | Deadline No later than 72 hours after becoming aware of the breach | IDPC | Law No. 124/2024 "Për mbrojtjen e të dhënave personale" (Law No. 124/2024 on the Protection of Personal Data) | official | |
Art. 29(1) requires the controller to notify the Commissioner no later than 72 hours after becoming aware of the breach. A controller that notifies late must explain the delay. |
|||||
| No obligations match these filters. | |||||