Responsibilities, principles and measures with respect to the protection of personal data and institution responsible for monitoring the legitimacy of data processing are described in the Law No.03/L - 172 on the Protection of Personal Data ("the Law on the Protection of Personal Data"), published on 31.05.2010 on Official Gazette 70/2010 of the Assembly of the Republic of Kosovo and (Law Nr. 9887, published on 10.03.2008, modified by Law Nr. 48/2012 Republic of Albania.

Law can be found in the following links:
For Republic of Kosovo:
https://gzk.rks-gov.net/ActDetail.aspx?ActID=2676

For Republic of Albania:
https://mb.gov.al/ligj-per-mbrojtjen-e-te-dhenave-personale/