Serves under-18s, in Albania

Law No. 124/2024, Arts. 8(6), 9, 10 (special categories, criminal records and children's data) · Read the law's page

• Do not process sensitive data, meaning racial or ethnic origin, political opinions, religious or philosophical belief, trade union membership, genetic data, biometric data, health records, or sexual orientation, unless a listed exception applies, such as the data subject's explicit consent to a specified purpose.
• Treat a facial image or other biometric identifier as sensitive data requiring one of Article 9's listed exceptions before you may process it; the definition names a facial image as an example, so a derived faceprint is covered and the definition is not confined to a raw recording.
• Do not process sensitive data about race or ethnic origin unless the processing ensures justice and equality on that ground and carries appropriate safeguards, and put appropriate technical and security safeguards in place before relying on any Article 9 exception.
• Process the personal data of a minor for the online delivery of goods or services only where the minor is at least 16, and where the minor is younger, obtain consent given or authorized by a parent or legal custodian.
• Process criminal records only under the control of the competent authority or where a law specifically authorizes it, with adequate protection for the rights and freedoms of the data subject.