XK-LAW-06-L-082
Law No. 06/L-082 on Protection of Personal Data
Information and Privacy Agency
🇽🇰Kosovo
Skin
Kosovo overview
Kosovo has a GDPR-aligned personal data law
Law No. 06/L-082 on Protection of Personal Data was published on 25 February 2019 and entered into force 15 days later. It is supervised by the Information and Privacy Agency.
Operational points
The law requires lawful and transparent processing, accountability, privacy by design and default, processor controls, records, security, breach management, DPIAs, DPOs in specified cases and lawful international transfers. A regulator breach notice is generally due within 72 hours where risk is possible, and affected people must be informed without undue delay where high risk is possible.
A child may consent to an information-society service from age 16. The law also contains specific rules for direct marketing and camera surveillance.
What this means for you
Apply a GDPR-style programme, but configure it to Kosovo's Article 7 child-consent rule, local Agency, transfer authorisation provisions, direct-marketing rules and surveillance requirements.