Kosovo Law No. 06/L-082 on Protection of Personal Data

National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.


Short name	XK LPDP
Region	Europe
Country or scope	Kosovo
Sector	Privacy
In your workspace	Off until you switch it on in Compliance › Manage.

How Safeguard covers XK LPDP

Scan requirements: 5, all decided by a scan.
Controls: the scan requirements below.
Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
Policy templates: 22 from the standard set.

How each kind of coverage works, and what the readiness score counts: Compliance frameworks.

Each scan of a product checks these 5 requirements against what the scan found, including the product's software inventory (SBOM).

Requirement	What Safeguard checks	Decided by
`XK-LPDP-SEC` Security of Processing	Controllers and processors must implement appropriate technical measures ensuring confidentiality, integrity and resilience of processing systems; integrity hashes on software components evidence protection against tampering (Law 06/L-082 GDPR Art. 32-equivalent security obligation)	Scan
`XK-LPDP-ROP` Records of Processing Activities	Controllers must maintain records of processing activities, which presupposes an inventory of the software systems and components that carry out the processing (Law 06/L-082 GDPR Art. 30-equivalent records obligation)	Scan
`XK-LPDP-PROC` Processor Guarantees	Processing may be entrusted only to processors offering sufficient guarantees of appropriate safeguards, requiring visibility into the suppliers of each software component in the chain (Law 06/L-082 GDPR Art. 28-equivalent processor obligation)	Scan
`XK-LPDP-BRE` Breach Notification Readiness	Personal data breaches must be notified to the Information and Privacy Agency within 72 hours, requiring the ability to identify exactly which components were affected (Law 06/L-082 GDPR Art. 33-equivalent breach obligation)	Scan
`XK-LPDP-DBD` Data Protection by Design	State-of-the-art safeguards must be integrated into processing systems from the design stage, which requires knowing the exact versions of the components in use (Law 06/L-082 GDPR Art. 25-equivalent by-design obligation)	Scan

All 22 from the standard set, adapted to XK LPDP.