Within the framework of Law No. 124/2024 “On the Protection of Personal Data”, the Information and Data Protection Commissioner’s Office has adopted Decision No. 1 dated 30.4.2025 “On the determination of countries that ensure an adequate level of protection of personal data”.

The Commissioner’s decision establishes the list of safe countries for the international transfer of personal data to the Member States of the European Union that implement the General Data Protection Regulation (GDPR), the Member States of the European Economic Area, which, based on the EEA Agreement3, also implement the GDPR, the parties to Convention 108 of the Council of Europe, etc.

This act also reflects the mutual recognition between Albania and Kosovo of the right to transfer personal data as countries with an adequate level of data protection. This was achieved by decision no. 7, dated 29.4.2025, of the Information and Data Protection Commissioner and decision no. 21 of the Commissioner of the Kosovo Information and Privacy Agency.

The mutual recognition between Albania and Kosovo for the international transfer of personal data brings a number of important advantages for the controllers of both countries. In this context, faster data exchange is enabled and efficiency in international cooperation is increased. This mutual recognition supports the further development of the digital market and services in the region, while also enabling a higher level of protection of personal data and the rights of individuals.