The Information and Privacy Agency of Kosovo, through Decision No. 22/2025 dated 30 April 2025, approved the list of countries and international organizations providing an adequate level of personal data protection.
As is well known, the Law on Personal Data Protection provides that the transfer of personal data outside the Republic of Kosovo is permitted only where the receiving country or international organization ensures an adequate level of personal data protection.
Otherwise, transfers of personal data to countries or international organizations that do not provide an adequate level of protection are subject to a separate procedure requiring special authorization from the Agency.
On 30 April 2025, the Agency adopted Decision No. 22/2025, thereby updating the list of countries providing an adequate level of personal data protection.
This Decision replaced the previous decision issued in 2024 and, for the first time, included the Republic of Albania as a country ensuring an adequate level of personal data protection.
