The HD-led project Support to Kosovo Institutions in the Field of Protection of Personal Data has been awarded an eight-month extension: an additional 377 working days and almost EUR 350 000. The project will now last a total of 32 months — through September 2016.
Above all, the extension will enable us to provide more training for the staff of the National Agency for the Protection of Personal Data (NAPPD), particularly to build staff capacity in the inspection of big state data controllers — Civil Registry System, Criminal Record System, Land Registry, Central Bank Registry, etc. — that are processing thousands of personal information/data. Currently, such capacity among NAPPD staff is poor, and this is one of the reasons why the big data controllers have not yet been inspected. An inspection plan/strategy will be developed to cover all areas of data protection, including areas for annual data protection, inspection priorities, methodology, etc.
The project extension will further allow: draft amendments of the Law on the Protection of Personal Data relevant to the new organisational structure of the NAPPD; a focus on sector-specific problems of Data Protection Officials (DPO) in education, media, municipalities, law enforcement, micro-finance sectors, banks, and insurance companies; awareness raising on data protection in the community of Kosovo decision makers; etc.
The proposed activities will bring added value to what has been achieved to date, ensure sustainability of the project results, strengthen NAPPD capabilities, and result in more efficient implementation of data protection and transparency.
Since Jan 2014, our team have worked to strengthen the rule of law in Kosovo trough supporting Kosovo institutions with respect to the protection of personal data (PPD).
Framework. In the 22 months of implementation so far, there have been major achievements in the legal and regulative framework of the data protection regime in Kosovo. The project has assisted in drafting amendments to the PPD in harmony with best European practices. The project has also assisted in drafting a sublegal act for NAPPD on security measures in line with requirements of EU Country Report, and in amending internal regulations. Also, the project has significantly built the capacity of NAPPD to draft their decisions and opinions.
Structure. Our team have supported the NAPPD to become fully functional, with stronger organisational structure. The project has delivered a review of the National Strategy 2012-2016 of the NAPPD, and a subsequent roundtable on the National Strategy. Currently the Project is finalizing the recommendations for the upcoming National Strategy 2017-2021.
Capacity. Our team have supported the NAPPD to have stronger capacity with respect to PPD, including through strengthening the capacities of Data Protection Officials (DPOs) of other institutions. This has included a number of seminars with full attendance and effectiveness, as well as in-depth training for DPOs regarding their general roles and obligations, daily tasks and challenges.
Environment. Through communications work, we have assisted in creating an environment of general public awareness of the legal and policy framework on PPD. This should further facilitate NAPPD's work to implement this framework and, ultimately, to protect the rights of businesses and individuals in Kosovo.