1. TAIEX Multi beneficiary Workshop on Data Protection and the Internet - New Challenges, 20-21 June 2013, Zagreb TAIEX Multi beneficiary Workshop on Data Protection and the Internet - New Challenges, 20-21 June 2013, Zagreb Tchnology & the role of the P.D.P. Commissioner in Albania Tchnology & the role of the P.D.P. Commissioner in Albania Amantia Hajdini Specialist Directory of Registration Neritan Sulaj IT Specialist

2. Agenda The internet penetration in Albania Instructions of the Commissioner Issues with personal data on internet Activities of the KMDP’s office Inspections 66 55 44 3 3 2 2 1 1 Amendments and partnerships The Commissioner for Personal Data Protection, ALBANIA

3. 215.000 subscribers ADSL 215.000 subscribers ADSL The internet penetration in Albania until the end of 2012 1.400.000 Internet users GPRS/EDGE (2.5 G), 3G 1.400.000 Internet users GPRS/EDGE (2.5 G), 3G 167 ISP (Internet Service Provider) 167 ISP (Internet Service Provider)

4. Issues with personal data on internet Publication of personal data in online media Promotional and unwonted messages – Direct Marketing Identity theft The Commissioner for Personal Data Protection, ALBANIA

5. Amendments and partnerships Amendment of the Telecommunication Law Cooperation Agreement with AKEP Amendment of the Ethic Code of Journalist The Commissioner for Personal Data Protection, ALBANIA

6. UDHËZIME TË KOMISIONERIT Instruction No.16 For "Definition of terms and conditions for exemption from the relevant obligations in the processing of personal data for journalistic, literary or artistic purposes” For”Protection of personal data in direct marketing and security measures” Instruction No. 9 Instruction No. 31 Instruction No. 6 Fundamental rules in connection with the protection of personal data in written, visual and audiovisual media The correct use of SMS-es for promotional purposes, advertisements, information, direct sale, via mobile phone network Instruction No. 35 For”Processing of personal data for the purposes of election campaign" The Commissioner for Personal Data Protection, ALBANIA

7. Inspection Online/Direct Marketing  The controller use the clients mail addresses and mobile number for marketing purposes without consent;  Shared information (databases) with third parties;  The controller use the clients mail addresses and mobile number for marketing purposes without consent;  Shared information (databases) with third parties; Complaint: “Controller A”. Complaint: “Controller A”. Recommendation  Not to disclosure personal data on third parties without written consent, fully informed and freely given on the reason for which his data will be processed.  Not to pass over the purpose of processing  Not to disclosure personal data on third parties without written consent, fully informed and freely given on the reason for which his data will be processed.  Not to pass over the purpose of processing The Commissioner for Personal Data Protection, ALBANIA

8. Inspection Online Marketing Complaint: “Data controller B” Complaint: “Data controller B”  “Online Marketing” using messages via internet to mobile subscribers;  Collecting mail addresses of the visitors from the website without given consent;  “Online Marketing” using messages via internet to mobile subscribers;  Collecting mail addresses of the visitors from the website without given consent; Recommendation: 1.To guarantee the freely given consent and the right to refuse it anytime for the clients who apply at the controllers premises; 2.The consent taken at the controllers website for promotional messages have to be separated & to guarantee the right to refuse it anytime… 3.To guarantee the consent for the actual clients… 4.The controller have to notify the Commissioner in 45 days for applying the recommendations. 1.To guarantee the freely given consent and the right to refuse it anytime for the clients who apply at the controllers premises; 2.The consent taken at the controllers website for promotional messages have to be separated & to guarantee the right to refuse it anytime… 3.To guarantee the consent for the actual clients… 4.The controller have to notify the Commissioner in 45 days for applying the recommendations. Copy of the Recommendation is sent to EPKA The Commissioner for Personal Data Protection, ALBANIA

9. Complaint Decision No. 1 Personal data publication in online newspaper. (The right to be forgotten) Anonymous or deletion of personal data. Decision No. 1/1  Imposing fines for not applying the Commissioners Decision.  Anonymous or deletion of personal data.  Imposing fines for not applying the Commissioners Decision.  Anonymous or deletion of personal data. The Commissioner for Personal Data Protection, ALBANIA Inspection Electronic written media

10. C.P.D.P. Activities Conference on: “Victims privacy treated from the Media” Conference on: “Personal data process on Telecommunication sector” The Commissioner for Personal Data Protection, ALBANIA

11. On protection of the consumers rights from the Online personal data abuse. Activity with Students The Commissioner for Personal Data Protection, ALBANIA

12. THANK YOU! Ju Faleminderit The Commissioner for Personal Data Protection, ALBANIA