{"id":26808,"date":"2026-02-26T10:00:00","date_gmt":"2026-02-26T10:00:00","guid":{"rendered":"https:\/\/eonimpresa.albaniainsight.com\/sektori-shendetesor-laboratoret-sanksion-komisioneri-dpa-smsi-ligji-124\/"},"modified":"2026-10-28T19:54:42","modified_gmt":"2026-10-28T19:54:42","slug":"sektori-shendetesor-laboratoret-sanksion-komisioneri-dpa-smsi-ligji-124","status":"publish","type":"post","link":"https:\/\/eonimpresa.albaniainsight.com\/en\/sektori-shendetesor-laboratoret-sanksion-komisioneri-dpa-smsi-ligji-124\/","title":{"rendered":"Sektori Sh\u00ebndet\u00ebsor dhe Laborator\u00ebt Diagnostikues: Sanksion 2.8 Milion\u00eb Lek\u00eb nga Komisioneri p\u00ebr Munges\u00eb DPA-je dhe Masash SMSI sipas Ligjit Nr. 124\/2024"},"content":{"rendered":"<div style=\"background-color: #f0f7fd; border-left: 5px solid #0056b3; padding: 20px; margin-bottom: 25px; border-radius: 4px;\">\n<h3 style=\"margin-top: 0; color: #0056b3;\">P\u00cbRMBLEDHJE EKZEKUTIVE E VENDIMIT T\u00cb KOMISIONERIT<\/h3>\n<ul style=\"margin-bottom: 0; padding-left: 20px; line-height: 1.7;\">\n<li><strong>Autoriteti Rregullator:<\/strong> Komisioneri p\u00ebr t\u00eb Drejt\u00ebn e Informimit dhe Mbrojtjen e t\u00eb Dh\u00ebnave Personale (KDIMDP)<\/li>\n<li><strong>Akti Zyrtar:<\/strong> Vendimi Nr. 08, dat\u00eb 26.02.2026 (Dosja Nr. 124\/2 prot.)<\/li>\n<li><strong>Sektori i Hetuar:<\/strong> Sektori Sh\u00ebndet\u00ebsor \/ Sh\u00ebrbimet Laboratorike Klinike dhe Diagnostikuese n\u00eb Shqip\u00ebri<\/li>\n<li><strong>Shkeljet e Konstatuara:<\/strong> Shkelje e Nenit 26 (Mungesa e Marr\u00ebveshjes s\u00eb P\u00ebrpunimit &#8211; DPA me n\u00ebnkontraktor\u00ebt e analizave) dhe Nenit 28 (Mungesa e Sistemit t\u00eb Menaxhimit t\u00eb Siguris\u00eb s\u00eb Informacionit &#8211; SMSI \/ ISO 27001) t\u00eb Ligjit Nr. 124\/2024<\/li>\n<li><strong>Masa Nd\u00ebshkuese:<\/strong> <strong>Gjob\u00eb administrative prej 2,800,000 Lek\u00eb<\/strong> (akt administrativ i detyruesh\u00ebm, i ankimuesh\u00ebm n\u00eb gjykat\u00eb sipas Neneve 92\u201394 t\u00eb Ligjit 124\/2024) dhe urdh\u00ebr me afat 30\u201345 dit\u00eb p\u00ebr zbatimin e masave t\u00eb detyrueshme tekniko-organizative.<\/li>\n<\/ul>\n<\/div>\n<p>P\u00ebrpunimi i t\u00eb dh\u00ebnave t\u00eb ve\u00e7anta sh\u00ebndet\u00ebsore (rezultatet e analizave biokimike, mostrave mjek\u00ebsore dhe t\u00eb dh\u00ebnave gjenetike) paraqet rrezikun m\u00eb t\u00eb lart\u00eb p\u00ebr t\u00eb drejtat dhe lirit\u00eb themelore t\u00eb qytetar\u00ebve. Me <strong>Vendimin Nr. 08 t\u00eb dat\u00ebs 26 Shkurt 2026<\/strong>, Komisioneri p\u00ebr Mbrojtjen e t\u00eb Dh\u00ebnave Personale (KDIMDP) ka vendosur nj\u00eb nga sanksionet m\u00eb t\u00eb r\u00ebnda financiare n\u00eb sektorin privat mjek\u00ebsor n\u00eb Shqip\u00ebri, duke d\u00ebnuar me <strong>gjob\u00eb 2.8 milion\u00eb lek\u00eb<\/strong> nj\u00eb struktur\u00eb laboratorike diagnostikuese.<\/p>\n<p>Ky vendim p\u00ebrfaq\u00ebson nj\u00eb standard orientues dhe precedent t\u00eb padiskutuesh\u00ebm p\u00ebr t\u00eb gjitha spitalet, klinikat, laborator\u00ebt dhe kompanit\u00eb farmaceutike n\u00eb vend, duke qart\u00ebsuar se delegimi i analizave apo softuer\u00ebve tek t\u00eb tret\u00ebt pa nj\u00eb kontrat\u00eb t\u00eb rrept\u00eb p\u00ebrpunimi (DPA) p\u00ebrb\u00ebn shkelje direkte q\u00eb nd\u00ebshkohet me penalitete maksimale.<\/p>\n<h2>Shkeljet e Konstatuara gjat\u00eb Hetimit Administrativ<\/h2>\n<p>N\u00eb p\u00ebrfundim t\u00eb hetimit administrativ t\u00eb kryer nga Drejtoria e Hetimit Sektorial dhe Siguris\u00eb s\u00eb t\u00eb Dh\u00ebnave, Komisioneri evidentoi dy shkelje thelb\u00ebsore t\u00eb kuadrit rregullator:<\/p>\n<ol style=\"line-height: 1.8;\">\n<li><strong>Mungesa e Kontrat\u00ebs s\u00eb Delegimit (DPA &#8211; Neni 26 i Ligjit Nr. 124\/2024):<\/strong><br \/>\n    Subjekti sh\u00ebndet\u00ebsor kishte deleguar p\u00ebrpunimin e disa analizave specifike dhe mir\u00ebmbajtjen e sistemeve IT tek laborator\u00eb dhe kompani t\u00eb treta (p\u00ebrpunues), pa n\u00ebnshkruar nj\u00eb marr\u00ebveshje formale ligjore q\u00eb p\u00ebrcakton detyrimet teknike, ruajtjen e konfidencialitetit mjek\u00ebsor dhe ndalimin e p\u00ebrdorimit t\u00eb t\u00eb dh\u00ebnave p\u00ebr q\u00ebllime t\u00eb tjera. Kjo bie ndesh drejtp\u00ebrdrejt me Nenin 26 t\u00eb Ligjit 124 dhe Nenin 28 t\u00eb GDPR-it.<\/li>\n<li><strong>Mungesa e Sistemit t\u00eb Menaxhimit t\u00eb Siguris\u00eb (SMSI &#8211; Neni 28 i Ligjit Nr. 124\/2024):<\/strong><br \/>\n    Subjekti nuk dispononte nj\u00eb Sistem t\u00eb Menaxhimit t\u00eb Siguris\u00eb s\u00eb Informacionit (SMSI) t\u00eb bazuar n\u00eb standardin nd\u00ebrkomb\u00ebtar <strong>ISO 27001<\/strong>, si dhe nuk paraqiti prova p\u00ebr trajnimin periodik t\u00eb punonj\u00ebsve t\u00eb stafit mjek\u00ebsor dhe administrativ q\u00eb kan\u00eb akses t\u00eb p\u00ebrditsh\u00ebm n\u00eb t\u00eb dh\u00ebnat e pacient\u00ebve.<\/li>\n<\/ol>\n<h2>Analiza Ligjore sipas Ligjit Nr. 124\/2024<\/h2>\n<table style=\"width: 100%; border-collapse: collapse; margin: 25px 0;\">\n<thead>\n<tr style=\"background-color: #003366; color: #ffffff;\">\n<th style=\"padding: 12px; border: 1px solid #ddd; text-align: left;\">Neni i Ligjit Nr. 124\/2024<\/th>\n<th style=\"padding: 12px; border: 1px solid #ddd; text-align: left;\">Parimi Rregullator<\/th>\n<th style=\"padding: 12px; border: 1px solid #ddd; text-align: left;\">Detyrimi Konkret p\u00ebr Strukturat Sh\u00ebndet\u00ebsore<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td style=\"padding: 12px; border: 1px solid #ddd;\"><strong>Neni 26<\/strong><\/td>\n<td style=\"padding: 12px; border: 1px solid #ddd;\">Marr\u00ebdh\u00ebnia Kontrollues &#8211; P\u00ebrpunues (DPA)<\/td>\n<td style=\"padding: 12px; border: 1px solid #ddd;\">\u00c7do bashk\u00ebpunim me laborator\u00eb t\u00eb jasht\u00ebm, ofrues sistemesh cloud apo softuer\u00eb administrimi k\u00ebrkon detyrimisht nj\u00eb kontrat\u00eb DPA me klauzola t\u00eb detajuara sigurie.<\/td>\n<\/tr>\n<tr style=\"background-color: #f9f9f9;\">\n<td style=\"padding: 12px; border: 1px solid #ddd;\"><strong>Neni 28<\/strong><\/td>\n<td style=\"padding: 12px; border: 1px solid #ddd;\">Siguria e P\u00ebrpunimit (SMSI &#038; ISO 27001)<\/td>\n<td style=\"padding: 12px; border: 1px solid #ddd;\">Institucionet q\u00eb trajtojn\u00eb t\u00eb dh\u00ebna sh\u00ebndet\u00ebsore n\u00eb shkall\u00eb t\u00eb gjer\u00eb duhet t\u00eb zbatojn\u00eb politika t\u00eb enkriptimit, pseudonimizimit dhe kontrollit t\u00eb rrept\u00eb t\u00eb aksesit.<\/td>\n<\/tr>\n<tr>\n<td style=\"padding: 12px; border: 1px solid #ddd;\"><strong>Nenet 93\u201394<\/strong><\/td>\n<td style=\"padding: 12px; border: 1px solid #ddd;\">Sanksionet Administrative dhe Gjobat<\/td>\n<td style=\"padding: 12px; border: 1px solid #ddd;\">Shkeljet e r\u00ebnda t\u00eb siguris\u00eb nd\u00ebshkohen me gjoba progresive t\u00eb llogaritura mbi xhiron vjetore, t\u00eb cilat p\u00ebrb\u00ebjn\u00eb titull ekzekutiv t\u00eb menj\u00ebhersh\u00ebm.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>Urdhri Korrigjues dhe Masat e Detyrueshme<\/h2>\n<p>P\u00ebrve\u00e7 gjob\u00ebs administrative prej 2.8 milion\u00eb lek\u00ebsh, Komisioneri i ka l\u00ebn\u00eb subjektit detyrime t\u00eb prera me afate t\u00eb rrepta:<\/p>\n<ul style=\"line-height: 1.8;\">\n<li><strong>Afat 30-ditor:<\/strong> Rregullimi dhe n\u00ebnshkrimi i t\u00eb gjitha aneks-kontratave DPA me laborator\u00ebt partner\u00eb dhe kompanit\u00eb mb\u00ebshtet\u00ebse IT;<\/li>\n<li><strong>Afat 45-ditor:<\/strong> Krijimi, mir\u00ebmbajtja dhe dokumentimi i plot\u00eb i Sistemit t\u00eb Menaxhimit t\u00eb Siguris\u00eb s\u00eb Informacionit (SMSI) dhe trajnimi i stafit;<\/li>\n<li><strong>Afat 60-ditor:<\/strong> Raportimi zyrtar me shkrim pran\u00eb Zyr\u00ebs s\u00eb Komisionerit mbi p\u00ebrmbushjen e t\u00eb gjitha masave korrigjuese.<\/li>\n<\/ul>\n<div style=\"background-color: #eafaf1; border-left: 5px solid #27ae60; padding: 20px; margin: 25px 0; border-radius: 4px;\">\n<h4 style=\"margin-top: 0; color: #1e8449;\">PROTOKOLLI I SIGURIS\u00cb I STUDIO EON P\u00cbR KLINIKAT DHE LABORATOR\u00cbT MJEK\u00cbSOR\u00cb<\/h4>\n<p>P\u00ebr t\u00eb evituar gjobat e r\u00ebnda dhe hetimet e Komisionerit, t\u00eb gjitha strukturat sh\u00ebndet\u00ebsore n\u00eb Shqip\u00ebri duhet t\u00eb auditojn\u00eb menj\u00ebher\u00eb k\u00ebto kat\u00ebr shtylla:<\/p>\n<ul style=\"margin-bottom: 0; line-height: 1.7;\">\n<li><strong>Auditimi i Zinxhirit t\u00eb N\u00ebnkontraktor\u00ebve:<\/strong> Rishikimi i t\u00eb gjitha kontratave me laborator\u00ebt e jasht\u00ebm dhe hartimi i marr\u00ebveshjeve DPA sipas Nenit 26.<\/li>\n<li><strong>Hartimi i Paket\u00ebs Teknike SMSI:<\/strong> Vendosja e politikave t\u00eb siguris\u00eb s\u00eb informacionit, fjal\u00ebkalimeve t\u00eb forta, kopjet rezerv\u00eb (backups) t\u00eb enkriptuara dhe regjistrit t\u00eb log-eve t\u00eb aksesit.<\/li>\n<li><strong>Trajnimi i Dokumentuar i Stafit:<\/strong> Certifikimi i brendsh\u00ebm i mjek\u00ebve, laborant\u00ebve dhe stafit administrativ mbi konfidencialitetin mjek\u00ebsor.<\/li>\n<li><strong>Caktimi i DPO-s\u00eb (Neni 34 i Ligjit 124):<\/strong> Strukturat sh\u00ebndet\u00ebsore me volum t\u00eb lart\u00eb pacient\u00ebsh kan\u00eb detyrimin e em\u00ebrimit t\u00eb Zyrtarit p\u00ebr Mbrojtjen e t\u00eb Dh\u00ebnave.<\/li>\n<\/ul>\n<\/div>\n<p><em>Konsulent\u00ebt e <strong>Studio EON<\/strong> mb\u00ebshtesin spitalet, klinikat private dhe laborator\u00ebt diagnostikues n\u00eb Shqip\u00ebri me zgjidhje t\u00eb plota p\u00ebr auditimin e p\u00ebrputhshm\u00ebris\u00eb ligjore dhe ngritjen e sistemeve t\u00eb siguris\u00eb sipas k\u00ebrkesave t\u00eb Ligjit Nr. 124\/2024.<\/em><\/p>","protected":false},"excerpt":{"rendered":"<p>Komisioneri p\u00ebr Mbrojtjen e t\u00eb Dh\u00ebnave (KDIMDP) sanksionon me gjob\u00eb 2.8 milion\u00eb lek\u00eb nj\u00eb struktur\u00eb diagnostikuese p\u00ebr munges\u00ebn e marr\u00ebveshjes DPA me n\u00ebnkontraktor\u00ebt dhe munges\u00ebn e certifikimit SMSI\/ISO 27001 sipas Neneve 26 dhe 28 t\u00eb Ligjit Nr. 124\/2024.<\/p>","protected":false},"author":1,"featured_media":26812,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[93],"tags":[],"class_list":["post-26808","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-lajme"],"_links":{"self":[{"href":"https:\/\/eonimpresa.albaniainsight.com\/en\/wp-json\/wp\/v2\/posts\/26808","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/eonimpresa.albaniainsight.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/eonimpresa.albaniainsight.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/eonimpresa.albaniainsight.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/eonimpresa.albaniainsight.com\/en\/wp-json\/wp\/v2\/comments?post=26808"}],"version-history":[{"count":4,"href":"https:\/\/eonimpresa.albaniainsight.com\/en\/wp-json\/wp\/v2\/posts\/26808\/revisions"}],"predecessor-version":[{"id":27503,"href":"https:\/\/eonimpresa.albaniainsight.com\/en\/wp-json\/wp\/v2\/posts\/26808\/revisions\/27503"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/eonimpresa.albaniainsight.com\/en\/wp-json\/wp\/v2\/media\/26812"}],"wp:attachment":[{"href":"https:\/\/eonimpresa.albaniainsight.com\/en\/wp-json\/wp\/v2\/media?parent=26808"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/eonimpresa.albaniainsight.com\/en\/wp-json\/wp\/v2\/categories?post=26808"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/eonimpresa.albaniainsight.com\/en\/wp-json\/wp\/v2\/tags?post=26808"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}