Panic in people: Personal data out of Kosovo

The personal data of their citizens and vehicles, contrary to the law, has been transferred to online servers outside Kosovo by insurance companies at the request of the Kosovar Bureau, which has been negotiating with a private company for the policy system. Various citizens, although complaining according to procedures the law envisions, have not received answers.

Personal information of hundreds of thousands of people who have registered and provided vehicles in Kosovo, or even those who will do the same action in the future, has been transferred to online servers of foreign companies, this action not only illegal but also dangerous to our country's personal and national security.

The move occurred after the Kosovar Security Bureau instructed insurance companies to provide all the information of customer citizens, a private company that, instead of building and maintaining servers in the country, chose to transfer data abroad.

Such personal information transport outside Kosovo has alarmed many citizens who have complained about lack of transparency and no information about personal information, one that comes against the law.

Citizens with initials A.G., whose complaint includes Rtkli, have complained to the insurance company where she received the security policy, the Kosovo Central Bank, and itself the Agency for Protection of Personal Data.

I didn't get any answers from the insurance company, although she has filed several complaints that I asked for information. The Central Bank has returned no response, although I have made the complaint since December 10th. I've only received a promise from the Agency that my case will be considered. I'm worried about the possibility of misusing personal data”, Rtklives A.G., whose complaints have been recorded.

“The Information and Private Agency has accepted a request by date. 10,12.2021, in which you expressed concern about the possibility of misusing personal data from the insurance company, where you asked the Agency to conduct inspections and inspections in order to verify whether your personal data was violated, as well as whether the insurance company transferred this data to another country.

The agency in her work plan has ahead of you and inspections according to official duty in the insurance companies, in which case it will address the question of suspicion you have filed in this request”, the response sent by this agency to Citizen A. G.

On the other hand, it points out that based on Law No. 06/L-082 for the Protection of Personal Data (in the text meme LMDHP) on Article 12, the controller at the moment when he receives personal data is obliged to provide definite information on this article, in which the purpose of processing data is included, and in the case that the controller intends to transfer personal data to a”, it is now said in the Agency's response.

“These are the ones I've been looking for based on the laws in power”, shows A. G. For the Rtkles.

Except A.G. Rtkles have complaints of many other citizens.

In fact, carrying personal data of Kosovo's citizens to the Microsoft Azzuro company servers from the Bureau and insurance companies seems to be an unauthorised operation because none of the institutions questioned were able to provide any documents that such was conducted with authorisation from the Agency and under law in power.

Article 44 of the same law confirms that the transfer of personal data must be made according to the rules in force, which are required and the consent of the preliminary people who have received the data.

Our allegations of carrying personal data outside Kosovo is even more obvious now that I have complained to all institutions, and none of them is giving answers to”, says citizen with initials B. G.

Rtclive has been sending questions to the Kosovo Central Bank's Agency for Information de Private, for several days, but no answers have been received, which it will publish at the moment it receives editorials.