The Office of the Commissioner for the Right to Information and Protection of Personal Data participated in the 24th Annual Meeting of Central and Eastern European Data Protection Authorities, held on 24–26 September 2026 in Zadar, Croatia. The institution was represented by the Director of the Cabinet, Besa Velaj, and Media Adviser, Joniada Koçi.
The meeting was opened by Zdravko Vukić, Director of the Croatian Personal Data Protection Authority, in his capacity as host, and Mirosław Wróblewski, President of the Polish Data Protection Authority. Keynote addresses were delivered by the European Data Protection Supervisor, Wojciech Wiewiórowski, Professor Paul Quinn of Vrije Universiteit Brussel, and Ana Tokhadze of the Council of Europe.
The programme continued with two parallel workshops. The first focused on the implementation of the European Health Data Space (EHDS) and its relationship with personal data protection rules. Discussions addressed patients’ rights to access and rectify their health data, control over access to electronic health records, the exchange of information in the context of cross-border healthcare, the use of health data for scientific research, among other topics.
The representatives of the Office of the Commissioner participated in the second workshop, which focused on artificial intelligence.
The workshop featured presentations by representatives of the European Data Protection Board, the Dutch Data Protection Authority, the Council of Europe, and academia. The discussions focused on data protection impact assessments, accountability by design in the development of AI agent systems, methodologies for assessing risks to human rights, and fundamental rights impact assessments.
Ana Tokhadze presented the practical approaches HUDERIA and COBRA, while Professor Alessandro Mantelero presented the FRIA methodology, which was subsequently applied through practical exercises based on concrete case
s.
Participation in this meeting provided an opportunity to exchange experiences with peer authorities and to further strengthen the expertise of the Office of the Commissioner in the field of personal data protection.
