The Office of the Commissioner for the Right to Information and Personal Data Protection has reacted after the publication and circulation in the media and social networks of information related to the health condition of the Mayor of Gjirokastra, Flamur Golemi, describing this practice as a violation of the law. The news about the Mayor turned out to be false.

In a statement to the media, the Commissioner emphasizes that “health data constitute a sensitive category and their processing is permitted only in limited cases, clearly defined by Law No. 124/2024 “On the Protection of Personal Data”. According to the Commissioner, “the publication of these data without a legal basis and without a clear public interest constitutes unlawful processing and directly violates the private life of individuals”.

The institution draws attention to the fact that the right to privacy is guaranteed by the Constitution of Albania and the European Convention on Human Rights, while warning that such publications, especially when unconfirmed or inaccurate, can seriously damage the dignity and reputation of the persons involved.

Also, the Office of the Commissioner for the Right to Information and Personal Data Protection requests the immediate deletion of content related to this case from the media and online platforms, also warning of measures.

Full reaction

The publication of health data in the media constitutes a violation of Law No. 124/2024 “On the Protection of Personal Data”

The Office of the Commissioner for the Right to Information and Personal Data Protection, in its capacity as the supervisory and monitoring authority for the protection of personal data in the Republic of Albania, in implementation of its legal powers, is following with particular concern the publication and circulation in the media and social networks of a news item containing information on the health status of several identifiable individuals in the Municipality of Gjirokastër.

Article 35 of the Constitution of the Republic of Albania, Article 8 of the European Convention on Human Rights and Law No. 124/2024 “On the Protection of Personal Data” guarantee the right to respect for private life and the protection of personal data.

Within the framework of the legislation in force on the protection of personal data, we emphasize that health-related data constitute special categories of personal data (sensitive data), the processing of which, according to Article 9 of the law, is prohibited in principle and permitted only in limited cases, determined by this law. Consequently, the publication of personal data in the media, and in particular of health-related data, in the absence of a legal basis and a clear, concrete and overriding public interest, constitutes unlawful processing and is contrary to the legislation in force.

As mentioned above, the publication of such information, especially when it is unconfirmed, inaccurate or unnecessary for the public interest, seriously violates the dignity and reputation of individuals and can have direct consequences in their personal and professional lives. In a public space where information circulates rapidly, the handling of health-related data requires special care and increased responsibility.

Such publications contradict the provisions of Article 43 of Law No. 124/2024 “On the Protection of Personal Data”, Instruction No. 02/2025 “On the Protection of Personal Health Data”, which allows the processing of such data only in limited and clearly defined cases by law, as well as Instruction No. 07/2025 “On the Protection of Personal Data in the Written, Electronic and/or Audiovisual Media” which requires the verification of information and prohibits the publication of sensitive data without a legal basis and without a clear, proportionate and justified public interest. The exercise of the right to freedom of expression and information cannot infringe the right to respect for private life and the protection of personal data, guaranteed by the Constitution and international instruments.

In this context, the Commissioner's Office, in the exercise of its powers, draws attention to and calls on the media, portals and users of social networks to show increased caution in handling information containing health data, to responsibly verify the accuracy of the information and to avoid the dissemination, publication and any further processing of this data, as well as to take immediate measures to delete from all platforms any content related to this case.

Failure to comply with these obligations constitutes a violation of Law No. 124/2024 and may result in the application of administrative measures and relevant sanctions.

The Commissioner's Office remains committed to ensuring the effective implementation of legislation on the protection of personal data and respect for the fundamental rights and freedoms of individuals.
Respect for privacy and human dignity remains a fundamental standard for a democratic society and an obligation for all public and media actors.