PRESS RELEASE - KES / CO fined for unenclosed billing
18/03/2020
According to the findings of the inspection conducted by the Agency, the Basic Court in Pristina fined the Kosovo Electricity Distribution and Supply Company (KES / CO) at € 9,000 for failing to take measures to prevent unauthorized access to personal data of customers
Prishtina, 14 March 2018
Upon request of the National Agency for the Protection of Personal Data, filed on 22 June 2016, for the initiation of the minor offence proceeding against KES / CO, on 9 March 2018, the Minor Offense Division of the Basic Court in Prishtina imposed a fine of € 9,000, as when distributing electricity bills, this company failed to enclose them, more precisely it failed to take security measures to prevent any unauthorized access to personal data of its customers.
This manner of personal data processing, by not preventing any unauthorized access to or reading of personal data during their storage and transmission including the transmission via telecommunications means and networks, is in violation to the provisions of Article 14 of the Law on Personal Data Protection and as such constitutes a violation of the privacy of the individual.
It should be noted that officials, employees and other individuals performing tasks related to the processing of data including the data controller are obliged, that during and after the contracted work, to protect the confidentiality of personal data with which they become familiar.
NAPPD
Office for Public Communication
038 200 62 961
According to the findings of the inspection conducted by the Agency, the Basic Court in Pristina fined the Kosovo Electricity Distribution and Supply Company (KES / CO) at € 9,000 for failing to take measures to prevent unauthorized access to personal data of customers
Prishtina, 14 March 2018
Upon request of the National Agency for the Protection of Personal Data, filed on 22 June 2016, for the initiation of the minor offence proceeding against KES / CO, on 9 March 2018, the Minor Offense Division of the Basic Court in Prishtina imposed a fine of € 9,000, as when distributing electricity bills, this company failed to enclose them, more precisely it failed to take security measures to prevent any unauthorized access to personal data of its customers.
This manner of personal data processing, by not preventing any unauthorized access to or reading of personal data during their storage and transmission including the transmission via telecommunications means and networks, is in violation to the provisions of Article 14 of the Law on Personal Data Protection and as such constitutes a violation of the privacy of the individual.
It should be noted that officials, employees and other individuals performing tasks related to the processing of data including the data controller are obliged, that during and after the contracted work, to protect the confidentiality of personal data with which they become familiar.
NAPPD
Office for Public Communication
038 200 62 961