The Information and Privacy Agency Imposes Fine on Regional Water Supply Company “Prishtina” for Violating Personal Data Protection Law

The Information and Privacy Agency (IPA) has received complaints from citizens (data subjects) reporting that the Regional Water Supply Company “Prishtina” distributed monthly water bills in a manner that exposed consumers’ personal data to unauthorized access.

As an independent authority overseeing the implementation of Law No. 06/L-082 on the Protection of Personal Data, the Information and Privacy Agency, after reviewing the complaints, found that K.R.U. “Prishtina” failed to implement adequate security measures in processing personal data during the distribution of bills to citizens. Consequently, a fine has been imposed on K.R.U. “Prishtina” for violating the Personal Data Protection Law.

The Information and Privacy Agency calls upon all data controllers (both public and private) to process personal data in a lawful manner. Otherwise, the Agency is obligated, based on its legal competencies, to take appropriate actions and measures in cases of non-compliance with the provisions set out by the Personal Data Protection Law.