Criminal Code, Unauthorized Computer Access
Criminal Code of the Republic of Albania (approved by Law 7895/1995, as amended) Art. 192/b (Unauthorized Computer Access), added by Law 8733/2001 and amended by Law 9686/2007 and Law 10 023/2008
In force.
A computer misuse rule binding public and private bodies.
- Obligation class
- Access restriction
- Audit expectation
- none
What it requires
- Do not enter a computer system, or a part of it, without authorization or beyond the authorization held, by breaching its security measures.
- Do not enter without authorization, or beyond the authorization held, a military, national security, public order, civil protection or health computer system, or any other computer system of public importance.
These lines are LexLint's reading of the law's text.
In the frameworks
- NIST AI RMF
- MAP 4.1Approaches for mapping AI technology and legal risks of its components – including the use of third-party data or software – are in place, followed, and documented, as are risks of infringement of a third party’s intellectual property or other rights.
- NIST AI 600-1
- GAI-RISK-09Information Security
- GAI-RISK-12Value Chain and Component Integration
- OWASP LLM Top 10
- LLM03:2026Excessive Agency
- OWASP Agentic Top 10
- ASI03Identity and Privilege Abuse
- MIT mitigations Draft
- FINOS AIGF
- AIR-PREV-018Agent Authority Least Privilege Framework
- AIR-PREV-023Agentic System Credential Protection Framework
- ETSI EN 304 223
- 5.1.2-6Access the AI system gets to other systems and data sources is minimal and risk assessed.
Our reading of where this law's duties sit in each framework. It never says that running a control meets the law. How we read a framework against the law
Identifiers refer to ETSI EN 304 223 V2.1.1 (2025-12), © ETSI 2025, all rights reserved. ETSI owns the standard; no ETSI text (titles or sentences) is reproduced here. The standard is free to download from ETSI.
If you get it wrong
Criminal exposureYes
Criminal exposure note
A fine or imprisonment of up to three years for unauthorized access to a computer system, or exceeding the authorization to enter it, by breaching its security measures; imprisonment of three to ten years where the offense is committed in a military, national security, public order, civil protection or health computer system or another system of public importance (Art. 192/b).
What it makes you log
Logging duty
Article 192/b makes it an offence to enter a computer system, or a part of it, without authorization or beyond the authorization held, by breaching security measures, with a higher penalty for military, national security, public order, health or other systems of public importance. It imposes no duty to create, keep, produce or review a log or record.
- Kind
- None
- As of
What this law does
Article 192/b of the Criminal Code, headed unauthorized computer access, punishes entering a computer system or part of it without authorization, or beyond the authorization held, by breaching its security measures, with a fine or imprisonment of up to three years. Where the offense is committed in a military, national security, public order, civil protection or health computer system, or in any other computer system of public importance, the penalty is imprisonment of three to ten years.
Law 8733 of added the article, and Law 9686 of and Law 10 023 of amended it, but no source stating the day Law 10 023 came into force has been located.
When LexLint raises it
When your app profile says your app crawls the web or trains models.
Back to the example · Lint your app
Page updated .