The Agency for Information and Privacy (AIP) has reiterated its call on political parties and entities to strictly respect personal data protection rules during the campaign for the early parliamentary elections in the Republic of Kosovo, scheduled for December 28, 2025.
In a public statement, AIP reminded political actors that the processing of personal data during the election campaign must fully comply with Law No. 06/L-082 on Personal Data Protection, as well as with the Agency’s guidelines governing communication with voters during electoral processes.
Legal Basis and Accountability
The Agency stressed that the use of personal data for candidate promotion, voter communication, or political activities must be based on clear legal grounds, while respecting the principles of lawfulness, proportionality, and transparency.
According to AIP, political entities bear full responsibility for ensuring that citizens’ personal data are processed securely, lawfully, and responsibly throughout the campaign.
Prohibited Practices and Citizens’ Rights
AIP highlighted several key obligations for political subjects, including:
- Processing personal data only on lawful grounds, such as citizens’ consent, legitimate interest, or other legally defined bases;
- A strict prohibition on using contact data obtained through public office or non-political purposes for political marketing or campaign communication;
- Immediate cessation of communication upon a citizen’s objection to the use of their data for political marketing purposes.
The Agency emphasized that citizens have the right to object at any time to the processing of their personal data for political promotion.
Profiling and Sensitive Data
Another major concern raised by AIP relates to voter profiling and large-scale processing of sensitive personal data. Such practices should be avoided, except in cases where there is a clear legal basis and adequate protective measures are in place.
Where political entities use technologies that pose a high risk to individual rights and freedoms, they are required to conduct a Data Protection Impact Assessment (DPIA), in line with AIP guidelines.
Transparency and Institutional Support
The Agency also called for full transparency toward citizens, including the publication of clear, updated, and easily accessible privacy policies throughout the election period.
AIP confirmed that it will provide professional support and guidance to political entities, with the aim of ensuring that the electoral process is conducted in line with personal data protection standards.
