Tirana, April 6, 2021 - CRCA / ECPAT Albania, theFree Legal Office for Vulnerable Children and Youth and the National Platform ISIGURT.al, through this public call addressed to three public national institutions: the Commissioner for Data Protection, National Police Authority and the Directorate for the Civil Registrar, express our concern on the existence of an Albanian language website, which enables receipt online of extremely sensitive and personal information for every citizen in Albania.
Based on several reports made to the National Platform SIGURT.al, the experts of CRCA / ECPAT Albania and the Free Legal Office for Vulnerable Children and Youth, were informed that there is an Albanian webpage, which seriously endangers making public the identity of children throughout Albania, including sensitive data as their exact address. The page can be easily found. A simple search on the page, gave us access to personal and sensitive data, including the address, residency, civil and family status etc., as if we were accessing data of the Civil Registry office.
In our opinion, such a website seriously puts in danger the life and safety of children in Albania, because it is easily accessible by pedophiles and sexual predators. Furthermore, if one requests further detailed personal information, the owners of the website ask visitors to purchase other data, based on the number of searches and views you have had on the website. This raises the second question, not only on the manner how our personal data are used by an unauthorized party for business purposes, when such data are legally assumed to be protected, and not sold for material benefits online.
Article 17 of Law 18/2017 "For the protection and the Rights of the Child", guarantees the protection of children's privacy in any given situation. The fact that the personal and sensitive data of children are online, it means that the Albanian institutions have allowed this webpage to violate the law and the safety of children.
The web-address is also in total contradiction with Law no. 9887, dated 10.03.2008 "On data protection", which clarifies that personal data of everyone must be published, processed, or even identified only based on giving consent by each person. Article no. 28 of the same law, states that controllers, processors, and persons who are made aware of the processed data, during the exercise of their functions, are obliged to maintain confidentiality even after the end of the function.
Article 27/2-b in Law no. 9887/2008, clearly explains that the use of personal data is done by order of organizational units or authorized operators. From all the communications that CRCA/ECPAT Albania has had so far with several public institutions, responsible for the collection, processing, and storage of personal data, it results that the site is not administered by a responsible public institution, which has the legal right to administer personal and sensitive data for each citizen.
Regarding the above, CRCA/ECPAT Albania, the Free Legal Aid Office for Vulnerable Children and Youth and the National Platform ISIGURT.al use this opportunity to ask the responsible public institutions to identifying the responsible persons or units that have provided this website with sensitive data and information, in order to ensure the protection of all sensitive data and information for children in Albania.
For more information, contact:
CRCA / ECPAT Albania