LPA LEGAL

Newsletter | LPA LEGAL® ALBANIA 2025 Legal Update

New Personal Data Protection Law Enters into Force

Law No. 124/2024 “On the Protection of Personal Data” entered into force in February 2025, aligning Albania’s legal framework with the European Union’s General Data Protection Regulation (GDPR).

This law introduces substantial obligations for both public and private entities, including:
• Stronger consent requirements Only clear, informed, and documented consent is legally valid.
• The right to be forgotten Individuals may request full erasure of their personal data.
• Data portability Individuals may obtain and transfer their data in a structured format.
• Privacy by design Organizations must embed data protection into systems and operational workflows.
• Higher penalties Fines may reach up to 2% of the company’s annual turnover in cases of serious breaches.

All data controllers and processors operating in Albania, including businesses, public institutions, service providers, and employers.

Recommended actions:
• Update internal privacy policies and external-facing consent forms
• Conduct internal data audits to ensure compliance
• Implement data protection impact assessments
• Train employees on new data rights and responsibilities

© LPA LEGAL 2025 | Newsletter