Jobits K ESCO, distributed citizen bills without putting them in envelopes

According to the announcement, K The ESCO has not undertaken the necessary security measures in processing personal data during bill distribution.

Full announcement:

Agency for Information and Private Eagle Jobe to K Company ESCO to violate the Law for the Protection of Personal Data

Pristina, 19.08.2024

Information and Private Agency (AIP), such as the supervisory authority for law enforcement No. 06/L-082 for the Protection of Personal Data, has imposed fines on the Kosovar Company for Electricity Supply, S. A ( KESCo) for not taking the necessary security measures in processing personal data while distributing bills to citizens.

The Agency for Information and Privateity has accepted several complaints from citizens about the action that KESCO has distributed monthly bills on spending electricity by failing to apply security measures and making access to unauthorized persons in personal consumer data.

During the complaint review, The AIP has found that the ECSCo has failed to implement security measures to protect the citizens' personal data, thus violating its legal obligations.

The action of the Agency for Pronouncement of fines to ECSCo has been undertaken following the awareness campaign the agency has held in February 2024, with all companies making the bill distribution, with which it has called for implementation of the legal obligations these companies have towards consumers. In order to prepare the conditions, the Agency has asked companies to take all measures by 30 June 2024 to ensure personal protection and data.

Personal data security is a fundamental citizens' right and protection of these data should be a priority for any company that processes personal data.

The Information and Private Agency would continue monitoring law enforcement by private companies and public institutions to ensure the protection of personal citizen data.