Continue reading on DataGuidance with:
Free Member
Limited ArticlesCreate an account to continue accessing select articles, resources, and guidance notes.
Already have an account? Log in
Create an account
Join our community for free to access exclusive whitepapers, reports, and regulatory information.
Albania: IDP publishes recommendations on personal data protection in public health institutions
On September 17, 2024, the Information and Data Protection Commissioner (IDP) announced that it had carried out administrative investigations in public health institutions of primary care, such as health and specialty centers. As a result of these investigations, the IDP published a recommendation entitled 'On compliance with legal obligations within the protection of personal data in health centers and specialty centers.'
The IDP outlined, among other things, that:
- health data, classified as sensitive data, benefits from a higher level of protection under the Law on the Protection of Personal Data No. 9887 of 10 March 2008 (the Law) to guarantee its security and that the implementation of appropriate technical, and organizational measures is necessary;
- concrete retention periods must be defined according to the time necessary to fulfill the purpose for which the data was collected;
- once the retention period expires, the data must be anonymized, archived, and/or deleted;
- concrete measures must be taken to provide continuous training for medical and administrative employees; and
- individuals must be informed about the presence of video surveillance systems in health center environments.
You can read the press release here and the recommendations here, both only available in Albanian.
Send us your Feedback!
Please let us know what you think of DataGuidance! It will only take 60 seconds and help us make the site better for you.
