Supervision & inspections
The Information and Data Protection Commissioner, the National Cyber Security Authority, the Bank of Albania and the Albanian Financial Supervisory Authority increasingly ask for proof that a company applies the rules, not just documents on paper. We help you align your business with their requirements, prepare for an inspection and respond to the authority on time and accurately.
Typical situations
- A company receives notice of an inspection from the Information and Data Protection Commissioner or the National Cyber Security Authority.
- The supervisory authority sends a request for information with a short deadline, and the documents are spread across several departments.
- After an inspection, the company has findings and must submit a corrective action plan.
Who it is for
- →Companies expecting an inspection or that have received notice of one
- →Institutions supervised by the Bank of Albania or the Albanian Financial Supervisory Authority
- →Operators of critical and important infrastructure
- →Companies that have received a request for information, a finding or a fine from the supervisory authority
What we offer
- →We identify which authorities supervise you and what each of them requires of you
- →Pre-inspection check: the documents, procedures and evidence you will be asked for
- →Assistance during the inspection and responses to requests for information
- →Responses to findings and a corrective action plan
- →Mandatory notifications to the supervisory authority, for example of a data breach or a cyber incident
- →Challenging fines and administrative measures, on appeal and in court
- →A short notice when a new rule that affects you comes out
How we work
- →Inspection readiness check, with a report and an action list
- →Immediate support when the inspection or the request arrives
- →Ongoing service: monitoring of new rules and a calendar of reporting obligations
Every engagement starts with a written agreement that also sets the fee.
Legal basis & authorities
- →Information and Data Protection Commissioner: Law No. 124/2024
- →National Cyber Security Authority: Law No. 25/2024
- →Bank of Albania and Albanian Financial Supervisory Authority: the laws on banks, capital markets, payments and insurance
- →Financial Intelligence Agency: Law No. 9917/2008
- →Law No. 44/2015 "Code of Administrative Procedure of the Republic of Albania" and Law No. 10279/2010 "On Administrative Offences", for inspections, fines and appeals
FAQs
Ask for the scope and the legal basis of the inspection. Call us from the start, so that the answers are accurate and complete.
Respond within the deadline. If the deadline is not enough, ask in writing for an extension before it expires and send at least what you have ready.
Yes. Depending on the applicable law, you first appeal through the administrative route or go directly to the administrative court. Deadlines are short, so send us the decision as soon as you receive it.