IDP ALBANIA

What IDP ALBANIA does

IDP Albania is the Commissioner for the Right to Information and Personal Data Protection (Komisioneri për të Drejtën e Informimit dhe Mbrojtjen e të Dhënave Personale), an independent constitutional-style regulatory authority headquartered in Tirana. Established in 2014 under Law No. 119/2014 on the Right to Information and operating alongside Law No. 9887/2008 on Personal Data Protection (with implementing Law No. 124/2024 aligning to the EU acquis), the Commissioner is elected by the Albanian Parliament and currently led by Besnik Dervishi, who has held the post since 2014.

The entity performs three core functions: (i) supervising public authorities' compliance with right-to-information obligations and adjudicating citizen complaints when access is denied; (ii) enforcing personal data protection rules against data controllers and processors, including handling data-breach notifications and cross-border transfer oversight; and (iii) following enactment of Law No. 12/2026, overseeing lobbying activity in Albania. It does not operate as a commercial undertaking and has no fee-based services; all outputs (complaint decisions, guidance, registers, opinions) are produced under statutory authority and financed through the Albanian state budget. The organization holds observer status at the European Data Protection Board, serves as Secretariat of the International Conference of Information Commissioners, and is a member of the Global Privacy Assembly, anchoring it within international regulatory networks.

Name

IDP ALBANIA

Legal name

Komisioneri për të Drejtën e Informimit dhe Mbrojtjen e të Dhënave Personale

Website

https://idp.al

Company type

Private

Founded year

2014

Operating status

Operating

Headcount range

1–10 employees

Short description

IDP Albania is the independent Albanian Commissioner for the Right to Information and Personal Data Protection, a Parliamentary-mandated regulator headquartered in Tirana that supervises public authorities, adjudicates citizen complaints, and, since 2026, oversees lobbying activity.

Ownership category

akta.pro rank

Product category

Data Protection and Information Rights Regulation

NAICS

Regulation, Licensing, and Inspection of Miscellaneous Commercial Sectors (92615), Justice, Public Order, and Safety Activities (922), Executive, Legislative, and Other General Government Support (921)

akta.pro primary industry

Data Protection, Privacy & Cybersecurity Regulators (BPAIAOAH)

akta.pro secondary industries

Privacy Management (Consent, DSAR, RoPA) (HDADAFAH), AI Privacy Engineering & Data Governance (PII, consent, retention) (HDAAAKAB), Data Privacy, Security & Governance for Education Data (FERPA/GDPR) (EDADAIAJ)

Keywords

• Data protection regulation
• Freedom of information
• Privacy compliance oversight
• Information rights authority
• Regulatory supervision services

Headquarters

HQ city

Tirana

HQ country

Albania

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Technology or R&D, Infrastructure, Marketing or Sales

Revenue model

1. Government Budget: The Commissioner has its own budget which is part of the state budget but is administered independently from the institution. Funded through public taxation.

Core offering

IDP Albania (the Commissioner for the Right to Information and Protection of Personal Data / KDIMDP) is an independent public authority that supervises and enforces Albanian laws on freedom of information (Law 119/2014), personal data protection (Law 124/2024), and open data reuse (Law 33/2022). It monitors public authorities' transparency compliance, handles citizen complaints, conducts administrative investigations, maintains the data controllers register, and oversees lobbying activities under Law 12/2026.

Product overview

IDP Albania (Commissioner for the Right to Information and Protection of Personal Data) operates as an independent supervisory authority rather than a commercial technology company. The institution provides regulatory and oversight services including: (1) Right to Information oversight, handling complaints and monitoring public authority compliance; (2) Personal Data Protection supervision, including guidance development and international data transfer oversight; (3) Open Data promotion and public information reuse monitoring; (4) Lobbying regulation under Law No. 12/2026. The digital infrastructure includes an Online Controllers Register for data controller notifications, an Online Notification Form System for public consultations, a Complaint Filing System, and an Open Data Portal. The institution operates under Law No. 119/2014 (Right to Information), Law No. 124/2024 (Personal Data Protection), and Law No. 33/2022 (Open Data).

Differentiator

Problem solved

Functional benefit

Products and services

• Right to Information Oversight Services Monitoring and supervising the implementation of Albanian legislation guaranteeing the right to information and access to public documents, including handling complaints and conducting administrative investigations for public authorities and citizens.
• Personal Data Protection Services Supervision and monitoring of personal data protection legislation implementation, including guidance development, international data transfer oversight, and complaint handling for controllers and data subjects.
• Online Controllers Register

Segments2 records

Ideal customer profiles2 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Partnerships

14 partnerships are on record, tiered international, core and regional.

• European Data Protection Board (EDPB)internationalStrategic or Co-development Partner · 1 January 2026Participates in EDPB plenary meetings as observer. Attended 121st Plenary meeting in Brussels June 2026.
• Global Privacy Assembly (GPA)internationalStrategic or Co-development Partner · 1 January 2026Member of Global Privacy Assembly. Former Executive Committee member 2018-2022.
• International Conference of Information Commissioners (ICIC)coreStrategic or Co-development Partner · 1 January 2026Serves as ICIC Secretariat. President of ICIC Executive Committee (Besnik Dervishi). Hosted 15th ICIC Conference.
• Azerbaijan Ombudsman (Human Rights)internationalStrategic or Co-development Partner · 5 June 2024Memorandum of Understanding on human rights and data protection cooperation
• Malta Information and Data Protection CommissionerregionalStrategic or Co-development Partner · 12 September 2022Cooperation agreement between Albanian and Maltese data protection authorities
• Kosovo Agency for Information and PrivacycoreStrategic or Co-development Partner · 21 April 2022Cooperation agreement for continued collaboration on data protection and freedom of information
• Baden-Württemberg Data Protection Commissioner (Germany)internationalStrategic or Co-development Partner · 4 September 2018Cooperation agreement with German regional data protection authority
• Italian Garante per la Protezione dei Dati PersonaliregionalStrategic or Co-development Partner · 10 February 2015Cooperation agreement between Italian and Albanian data protection authorities
• Italian Data Protection Authority (Garante)regionalStrategic or Co-development Partner · 10 February 2015Cooperation agreement for exchange of best practices and harmonization with EU standards
• Bulgaria Data Protection Commissioner, Kosovo Agency, Montenegro AgencyregionalStrategic or Co-development Partner · 26 September 2012Memorandum of cooperation among Balkan data protection authorities
• Kosovo Agency for Information and PrivacycoreStrategic or Co-development Partner · 9 November 2011Declaration on further cooperation between Albanian and Kosovo data protection authorities
• Ministry of Education and SciencecoreStrategic or Co-development Partner · 24 January 2011Cooperation for data protection awareness in educational institutions
• Ministry of JusticecoreStrategic or Co-development Partner · 17 September 2010Cooperation agreement for alignment of justice sector with data protection requirements
• General Directorate of State PolicecoreStrategic or Co-development Partner · 16 August 2010Cooperation agreement for data protection oversight in law enforcement activities, signed 16.08.2010

Scale indicators1 record

Recent moves9 records

Expansion highlights5 records

Direct peers

• Information and Data Protection Commissioner (Malta): Malta's combined information rights and data protection authority, which signed a 2022 cooperation agreement with IDPC. Structurally the closest small-state peer combining both mandates.
• Agency for Personal Data Protection (Montenegro): Montenegro's personal data protection supervisory authority, a fellow Western Balkan DPA and signatory to the 2012 Balkan DPAs memorandum of cooperation with IDPC.
• Commission Nationale de l'Informatique et des Libertés (CNIL): France's DPA, the archetypal EU data protection regulator with combined privacy and public-sector transparency roles. Closely comparable in mandate structure to IDPC's combined FOIA and data protection responsibilities.
• Information Commissioner's Office (ICO): UK's independent authority for information rights and data protection, combining FOIA-style oversight with privacy enforcement. Functionally the closest mirror of IDPC's combined right-to-information + data protection mandate.
• Kosovo Agency for Information and Privacy: Kosovo's data protection and access to information authority, with which IDPC has a long-standing bilateral cooperation agreement. Operates a near-identical combined privacy + FOIA mandate in a similarly sized Western Balkan jurisdiction.
• Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg: German state-level data protection and freedom of information commissioner with which IDPC signed a 2018 cooperation agreement. Closely comparable in combining privacy and access-to-information oversight.
• Garante per la Protezione dei Dati Personali (Italy): Italy's independent data protection authority with a comparable supervisory and sanctioning mandate over personal data. IDPC has a formal cooperation agreement with the Garante, making it a directly comparable European peer DPA.
• Commission for Personal Data Protection (Bulgaria): Bulgaria's DPA and co-signatory to the 2012 regional Balkan DPAs cooperation memorandum with IDPC. Comparable supervisory and investigatory powers over data controllers.

Broad incumbents

• European Data Protection Board (EDPB): EU-wide body of national DPAs in which IDPC holds observer status. Functions as the umbrella regulator of which IDPC aspires to become a full member upon EU accession.
• Global Privacy Assembly (GPA): International forum of data protection and privacy authorities of which IDPC is a member (former Executive Committee member 2018-2022). Comparable forum of peer regulators at a global level.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat3 records

Key risks5 records

Key highlights6 records

Customer concentration

• Xx.com/IdpAlbania
• YouTubeyoutube.com/channel/UCVNTGFtxO0RAVzYSXjb5wgA
• LinkedInlinkedin.com/company/idp-albania
• Instagraminstagram.com/idpc.albania

Revenue estimate

Valuation estimate

Number of profiles

Profiles8 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about IDP ALBANIA