Key Facts
Overview
Kosovo's Law 06/L-082 transposes the EU GDPR into Kosovo's legal framework, applying to processing by both private and public bodies. The AIP (Information and Privacy Agency) actively handles complaints and conducts investigations, though maximum penalties are modest at EUR 40,000.
What This Means for Your Website
- Consent is required for personal data processing of Kosovo visitors, including through cookies
- Data controller obligations align with GDPR standards
- Maximum penalties are EUR 40,000 per violation
- The AIP has taken initiatives to advance enforcement through complaints and proactive investigations
Key Requirements
The AIP enforces Law 06/L-082 with maximum penalties of EUR 40,000 per violation. The law provides GDPR-aligned data subject rights including access, correction, deletion, and data portability. The AIP can handle complaints, conduct investigations, and impose fines on both private and public entities.
How ConsentStack Handles This
ConsentStack applies GDPR-compliant consent standards for visitors from Kosovo, meeting the law's requirements for consent and data subject rights.
Penalties
Maximum EUR 40,000 per violation.
Key Requirements
- Consent for personal data processing including cookies
- Data controller and processor obligations aligned with GDPR
- Data subject rights: access, correction, deletion, portability
- AIP complaint and investigation cooperation
- Data breach notification requirements
Notable Provisions
- GDPR-transposed framework
- Maximum penalties capped at EUR 40,000
- AIP actively handling complaints and imposing fines
- Applies to both private and public bodies including diplomatic offices
Other Europe Regulations
Frequently Asked Questions
Is Kosovo's law aligned with GDPR?
Yes. Law 06/L-082 transposes the EU GDPR into Kosovo's legal framework, applying to both private and public bodies.
What are the data protection penalties in Kosovo?
Maximum EUR 40,000 per violation. While below GDPR levels, the AIP actively handles complaints and imposes fines.
Who enforces data protection in Kosovo?
The AIP (Information and Privacy Agency) handles complaints, conducts investigations, and imposes fines.
Stay compliant with Kosovo DPL
ConsentStack helps you implement Opt-in consent for Kosovo automatically.