Citizen awareness about privacy protection is at an unsatisfactory level, despite campaigns and advanced data protection legislation. This was stated by Krenare Sogojeva-Dermaku, Commissioner of the Agency for Information and Privacy, during a discussion at the “Open Speak” forum organized by the Fol Movement on the occasion of the International Data Protection Day.
The Commissioner explained that the Agency has imposed fines for violations of the law on private data protection, showing that the enforcement of the law is not merely a formal requirement but an ongoing process.
“In general, public awareness regarding privacy protection is still at an unsatisfactory level. Even though we have continuously conducted campaigns and have witnessed close cooperation with civil society to advance and communicate citizens’ rights to data protection, privacy and personal data protection remain rights that are often not taken seriously by modern citizens. We see every day that citizens themselves publish their own data without realizing the potential risks their actions online may have in the future,” she emphasized.
She highlighted that thanks to the digitalization strategy, no platform that collects citizens’ data can be operational without the approval of the Agency for Information and Privacy.
According to Commissioner Sogojeva-Dermaku, as long as Kosovo does not have an official domain, the possibilities for abuse remain very high.
“The number of complaints from young people is lower than from adults because we do not accept complaints from those under 18, since they must be data subjects with legal responsibility to exercise the right of complaint. Parents do submit complaints on behalf of their children. We have had cases where, after investigation, violations of data, misuse, and identity theft of a young person were found, and during review we discovered elements of criminal acts. These cases were then processed through the Kosovo Police, and the responsible party was identified… As long as Kosovo does not have an official domain, and given the many licensed internet service providers in Kosovo, the risk of abuse remains high,” she said.
As a specific example of risks to personal data, she mentioned recent cases involving messages that affected many citizens.
“The situation today, and the risks we face, are demonstrated by the recent case with these messages that reached us, where many citizens fell victim. Despite our public awareness efforts, citizens have not fully understood their privacy rights, let alone the risks that their data may be misused, how it may be misused, and the possible consequences. That is why, more than ever, in this campaign we have launched under the motto ‘Privacy starts with you,’ the goal is to deliver the message to citizens that we need to know our rights and learn how to act online, and importantly, how to protect our children,” she stated.
The Chairman of the Board of the Kosovo Journalists Association, Xhemajl Rexha, said that some media often publish personal data for financial gain.
He also expressed particular concern about the exposure of children, which often happens unintentionally, even when done with good intentions.“I have no objection to publishing information or names related to deputies accused of influencing the will of citizens through voting, since deputies are public figures and compete for an important position affecting Kosovo’s future in parliament. If their children, nephews, or close relatives are involved, it is understandable that media may be interested, prioritizing public interest over the privacy of deputies’ family members. In most cases, the idea of protecting people’s privacy should prevail, particularly regarding waiting for court decisions before someone is publicly exposed… Our main concern relates to exposing children, which sometimes happens unintentionally. Even when exposure is intended to support a good cause, parental or guardian consent should always be obtained,” he said.
