{"id":27311,"date":"2026-10-07T11:00:00","date_gmt":"2026-10-07T11:00:00","guid":{"rendered":"https:\/\/eonimpresa.albaniainsight.com\/dergimi-email-adresa-ne-cc-rreziku-data-breach-sanksione-ligji-124-2024\/"},"modified":"2026-10-07T11:00:00","modified_gmt":"2026-10-07T11:00:00","slug":"dergimi-email-adresa-ne-cc-rreziku-data-breach-sanksione-ligji-124-2024","status":"publish","type":"post","link":"https:\/\/eonimpresa.albaniainsight.com\/en\/dergimi-email-adresa-ne-cc-rreziku-data-breach-sanksione-ligji-124-2024\/","title":{"rendered":"D\u00ebrgimi i Email-eve me Qindra Adresa n\u00eb CC: Rreziku i Data Breach-it dhe Sanksionet e R\u00ebnda sipas Ligjit Nr. 124\/2024 dhe GDPR"},"content":{"rendered":"<div style=\"background-color: #f0fdf4; border-left: 5px solid #16a34a; padding: 20px; margin-bottom: 25px; border-radius: 4px;\">\n<h3 style=\"margin-top: 0; color: #166534;\">P\u00cbRMBLEDHJE EKZEKUTIVE P\u00cbR DREJTUESIT DHE ADMINISTRAT\u00cbN N\u00cb SHQIP\u00cbRI<\/h3>\n<ul style=\"margin-bottom: 0; padding-left: 20px; line-height: 1.7; color: #14532d;\">\n<li><strong>Praktika e Gabuar:<\/strong> D\u00ebrgimi i njoftimeve, ftesave, ofertave apo shkresave administrative duke futur dhjet\u00ebra ose qindra adresa email-i t\u00eb klient\u00ebve, bashk\u00ebpun\u00ebtor\u00ebve apo qytetar\u00ebve n\u00eb fush\u00ebn e dukshme <strong>CC (Kopje)<\/strong> n\u00eb vend t\u00eb fush\u00ebs s\u00eb fsheht\u00eb <strong>CCN \/ BCC (Kopje e Fsheht\u00eb)<\/strong>.<\/li>\n<li><strong>Kualifikimi Ligjor:<\/strong> P\u00ebrb\u00ebn <strong>komunikim t\u00eb paligjsh\u00ebm t\u00eb t\u00eb dh\u00ebnave personale te pal\u00ebt e treta<\/strong> dhe <strong>cenim t\u00eb siguris\u00eb s\u00eb t\u00eb dh\u00ebnave (Data Breach)<\/strong> sipas Ligjit Nr. 124\/2024 dhe GDPR-it.<\/li>\n<li><strong>Precedenti i Fundit Evropian:<\/strong> Garante Privacy ka nd\u00ebshkuar me sanksion administrativ Federat\u00ebn Komb\u00ebtare t\u00eb Urdhrit t\u00eb Biolog\u00ebve (Vendimi Nr. 763, Docweb 10309222) p\u00ebr d\u00ebrgimin e komunikimeve me adresa n\u00eb CC, duke refuzuar justifikimet e &#8220;gabimit njer\u00ebzor&#8221; apo &#8220;p\u00ebrkat\u00ebsis\u00eb n\u00eb t\u00eb nj\u00ebjtin komunitet profesional&#8221;.<\/li>\n<li><strong>Ekspozimi ndaj Gjobave:<\/strong> Ligji Nr. 124\/2024 parashikon gjoba deri n\u00eb <strong>40.000.000 lek\u00eb<\/strong> ose deri n\u00eb <strong>2% deri 4% t\u00eb xhiros vjetore globale<\/strong> p\u00ebr munges\u00eb masash teknike dhe organizative t\u00eb siguris\u00eb.<\/li>\n<\/ul>\n<\/div>\n<p class=\"lead\">N\u00eb tregun dhe administrat\u00ebn shqiptare, nj\u00eb nga veset m\u00eb t\u00eb p\u00ebrhapura dhe m\u00eb t\u00eb rrezikshme t\u00eb komunikimit t\u00eb p\u00ebrditsh\u00ebm \u00ebsht\u00eb d\u00ebrgimi i mesazheve elektronike masive duke vendosur dhjet\u00ebra apo qindra adresa email-i n\u00eb m\u00ebnyr\u00eb t\u00eb dukshme n\u00eb fush\u00ebn <strong>&#8220;To&#8221; (P\u00ebr)<\/strong> ose <strong>&#8220;CC&#8221; (Kopje)<\/strong>. P\u00ebr vite me radh\u00eb, kjo sjellje \u00ebsht\u00eb trajtuar me leht\u00ebsi, e justifikuar si &#8220;munges\u00eb kohe&#8221;, &#8220;gabim shpejt\u00ebsie&#8221; apo thjesht shp\u00ebrfillje e teknologjis\u00eb.<\/p>\n<p>Me hyrjen n\u00eb fuqi t\u00eb <strong>Ligjit Nr. 124\/2024 &#8220;P\u00ebr mbrojtjen e t\u00eb dh\u00ebnave personale&#8221;<\/strong>, i cili harmonizon plot\u00ebsisht legjislacionin shqiptar me standardet m\u00eb strikte t\u00eb Rregullores s\u00eb P\u00ebrgjithshme Evropiane p\u00ebr Mbrojtjen e t\u00eb Dh\u00ebnave (GDPR), kjo praktik\u00eb kthehet n\u00eb nj\u00eb <strong>bomb\u00eb me sahat juridike dhe financiare<\/strong> p\u00ebr \u00e7do kompani private, institucion shtet\u00ebror, shoqat\u00eb, studio ligjore apo klinik\u00eb n\u00eb Shqip\u00ebri.<\/p>\n<h2>Rasti Paralajm\u00ebrues: Pse Autoritetet Nd\u00ebshkojn\u00eb Shkeljet e Fush\u00ebs &#8220;CC&#8221;<\/h2>\n<p>N\u00eb nj\u00eb vendim t\u00eb r\u00ebnd\u00ebsish\u00ebm (Vendimi Nr. 763 i dat\u00ebs 7 tetor 2026, Docweb 10309222), Autoriteti Mbik\u00ebqyr\u00ebs sanksionoi nj\u00eb federat\u00eb komb\u00ebtare profesionale pasi stafi i saj kishte d\u00ebrguar dy njoftime zyrtare me email ku adresat personale t\u00eb profesionist\u00ebve ishin l\u00ebn\u00eb t\u00eb dukshme p\u00ebr t\u00eb gjith\u00eb marr\u00ebsit e tjer\u00eb.<\/p>\n<p>Mbrojtja e subjektit pretendonte se:<\/p>\n<ul style=\"line-height: 1.8;\">\n<li>B\u00ebhej fjal\u00eb p\u00ebr nj\u00eb gabim njer\u00ebzor t\u00eb izoluar dhe t\u00eb paq\u00ebllimsh\u00ebm t\u00eb punonj\u00ebsit;<\/li>\n<li>Platforma e post\u00ebs nuk e kishte menj\u00ebher\u00eb t\u00eb duksh\u00ebm butonin CCN;<\/li>\n<li>Marr\u00ebsit ishin koleg\u00eb t\u00eb s\u00eb nj\u00ebjt\u00ebs fush\u00eb dhe nuk kishte pasur asnj\u00eb d\u00ebm t\u00eb drejtp\u00ebrdrejt\u00eb.<\/li>\n<\/ul>\n<p>Autoriteti mbik\u00ebqyr\u00ebs i <strong>rr\u00ebzoi t\u00eb gjitha k\u00ebto pretendime<\/strong>. Parimi thelb\u00ebsor i vendosur \u00ebsht\u00eb i qart\u00eb: <strong>\u00e7do adres\u00eb email-i \u00ebsht\u00eb nj\u00eb e dh\u00ebn\u00eb personale<\/strong>. Zbulimi i saj ndaj personave t\u00eb tret\u00eb pa nj\u00eb baz\u00eb t\u00eb ligjshme \u00ebsht\u00eb i ndaluar. P\u00ebr m\u00eb tep\u00ebr, n\u00ebse sistemi ose organizimi i brendsh\u00ebm i kompanis\u00eb lejon q\u00eb nj\u00eb punonj\u00ebs me nj\u00eb klikim t\u00eb vet\u00ebm t\u00eb shp\u00ebrndaj\u00eb t\u00eb dh\u00ebnat e qindra personave, p\u00ebrgjegj\u00ebsia direkte bie mbi vet\u00eb drejtuesit e kompanis\u00eb p\u00ebr d\u00ebshtim n\u00eb sigurimin e masave mbrojt\u00ebse.<\/p>\n<h2>Pse Praktika n\u00eb Shqip\u00ebri P\u00ebrb\u00ebn Rrezik Kritik Sanksionues<\/h2>\n<p>N\u00eb realitetin e p\u00ebrditsh\u00ebm t\u00eb bizneseve n\u00eb Tiran\u00eb dhe qytetet e tjera, shohim shpesh:<\/p>\n<ol style=\"line-height: 1.8;\">\n<li><strong>Agjenci Imobiliare dhe Tregtare:<\/strong> D\u00ebrgojn\u00eb lista me prona, oferta apo katalogje duke vendosur 500 klient\u00eb potencial\u00eb n\u00eb CC. Secili prej marr\u00ebsve zbulon menj\u00ebher\u00eb baz\u00ebn e t\u00eb dh\u00ebnave t\u00eb konkurrent\u00ebve ose klient\u00ebve t\u00eb tjer\u00eb.<\/li>\n<li><strong>Kompani Eventesh, Trajnimesh dhe OJF:<\/strong> D\u00ebrgojn\u00eb konfirmime pjes\u00ebmarrjeje me t\u00eb gjith\u00eb pjes\u00ebmarr\u00ebsit n\u00eb t\u00eb nj\u00ebjtin email, duke ekspozuar emra drejtuesish, adresa private dhe lidhje pune.<\/li>\n<li><strong>Institucione Sh\u00ebndet\u00ebsore dhe Laborator\u00eb:<\/strong> Gabimi m\u00eb i r\u00ebnd\u00eb i mundsh\u00ebm \u2014 njoftime mbi orare analizash apo sh\u00ebrbimesh mjek\u00ebsore t\u00eb d\u00ebrguara n\u00eb grup me email-e t\u00eb hapura, \u00e7ka p\u00ebrb\u00ebn zbulim t\u00eb t\u00eb dh\u00ebnave sensitive sh\u00ebndet\u00ebsore (Neni 9 i Ligjit Nr. 124\/2024).<\/li>\n<\/ol>\n<p>Ky zakon jo vet\u00ebm q\u00eb shkat\u00ebrron besueshm\u00ebrin\u00eb e biznesit dhe krijon rrezik t\u00eb lart\u00eb t\u00eb sulmeve <em>phishing<\/em> dhe <em>spam<\/em> p\u00ebr t\u00eb gjith\u00eb t\u00eb p\u00ebrfshir\u00ebt, por p\u00ebrb\u00ebn nj\u00eb <strong>shkelje t\u00eb shum\u00ebfisht\u00eb t\u00eb Ligjit Nr. 124\/2024<\/strong>.<\/p>\n<h2>Analiza e Neneve t\u00eb Shkelura sipas Ligjit Nr. 124\/2024<\/h2>\n<table style=\"width: 100%; border-collapse: collapse; margin: 25px 0;\">\n<thead>\n<tr style=\"background-color: #0f172a; color: #ffffff;\">\n<th style=\"padding: 12px; border: 1px solid #ddd; text-align: left; width: 20%;\">Neni i Ligjit 124\/2024<\/th>\n<th style=\"padding: 12px; border: 1px solid #ddd; text-align: left; width: 30%;\">Dispozita Ligjore<\/th>\n<th style=\"padding: 12px; border: 1px solid #ddd; text-align: left;\">Pasojat p\u00ebr D\u00ebrgimin e Email-eve n\u00eb CC<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td style=\"padding: 12px; border: 1px solid #ddd;\"><strong>Neni 5(1)(f)<\/strong><\/td>\n<td style=\"padding: 12px; border: 1px solid #ddd;\">Parimi i Integritetit dhe Konfidencialitetit<\/td>\n<td style=\"padding: 12px; border: 1px solid #ddd;\">T\u00eb dh\u00ebnat duhet t\u00eb p\u00ebrpunohen n\u00eb m\u00ebnyr\u00eb q\u00eb t\u00eb garantohet siguria e duhur, duke p\u00ebrfshir\u00eb mbrojtjen kund\u00ebr p\u00ebrpunimit t\u00eb paautorizuar ose t\u00eb paligjsh\u00ebm.<\/td>\n<\/tr>\n<tr style=\"background-color: #f9f9f9;\">\n<td style=\"padding: 12px; border: 1px solid #ddd;\"><strong>Neni 23<\/strong><\/td>\n<td style=\"padding: 12px; border: 1px solid #ddd;\">Privacy by Design &#038; by Default<\/td>\n<td style=\"padding: 12px; border: 1px solid #ddd;\">Kontrolluesi \u00ebsht\u00eb i detyruar t\u00eb zbatoj\u00eb masa teknike q\u00eb n\u00eb faz\u00ebn e projektimit. Nj\u00eb kompani nuk mund t\u00eb p\u00ebrdor\u00eb kanale q\u00eb lejojn\u00eb gabime masive me nj\u00eb klikim.<\/td>\n<\/tr>\n<tr>\n<td style=\"padding: 12px; border: 1px solid #ddd;\"><strong>Neni 28<\/strong><\/td>\n<td style=\"padding: 12px; border: 1px solid #ddd;\">Siguria e P\u00ebrpunimit<\/td>\n<td style=\"padding: 12px; border: 1px solid #ddd;\">Detyrimi p\u00ebr t\u00eb zbatuar politika t\u00eb brendshme, udh\u00ebzime t\u00eb shkruara dhe konfigurime teknike q\u00eb pengojn\u00eb zbulimin aksidental t\u00eb t\u00eb dh\u00ebnave.<\/td>\n<\/tr>\n<tr style=\"background-color: #f9f9f9;\">\n<td style=\"padding: 12px; border: 1px solid #ddd;\"><strong>Neni 29<\/strong><\/td>\n<td style=\"padding: 12px; border: 1px solid #ddd;\">Njoftimi i Cenimit t\u00eb t\u00eb Dh\u00ebnave (Data Breach)<\/td>\n<td style=\"padding: 12px; border: 1px solid #ddd;\">\u00c7do ekspozim i till\u00eb \u00ebsht\u00eb nj\u00eb cenim i konfidencialitetit. Kompania duhet t\u00eb vler\u00ebsoj\u00eb rrezikun, ta regjistroj\u00eb n\u00eb Regjistrin e Cenimeve dhe brenda 72 or\u00ebve t\u00eb njoftoj\u00eb Komisionerin (IDP) n\u00ebse rreziku \u00ebsht\u00eb i lart\u00eb.<\/td>\n<\/tr>\n<tr>\n<td style=\"padding: 12px; border: 1px solid #ddd;\"><strong>Nenet 92\u201395<\/strong><\/td>\n<td style=\"padding: 12px; border: 1px solid #ddd;\">Sanksionet Administrative<\/td>\n<td style=\"padding: 12px; border: 1px solid #ddd;\">Gjoba nga Komisioneri deri n\u00eb <strong>40 milion\u00eb lek\u00eb<\/strong> ose <strong>deri n\u00eb 4% t\u00eb xhiros vjetore<\/strong> p\u00ebr subjektet q\u00eb neglizhojn\u00eb masat e siguris\u00eb.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<div style=\"background-color: #eafaf1; border-left: 5px solid #27ae60; padding: 20px; margin: 25px 0; border-radius: 4px;\">\n<h4 style=\"margin-top: 0; color: #1e8449;\">PROTOKOLLI I SIGURIS\u00cb I STUDIO EON P\u00cbR ELIMINIMIN E RREZIKUT T\u00cb EMAIL-EVE MASIVE<\/h4>\n<p>P\u00ebr t\u00eb shmangur gjobat e Komisionerit dhe padit\u00eb p\u00ebr d\u00ebmtim t\u00eb imazhit, \u00e7do kompani dhe organizat\u00eb n\u00eb Shqip\u00ebri duhet t\u00eb zbatoj\u00eb menj\u00ebher\u00eb k\u00ebt\u00eb protokoll t\u00eb p\u00ebrgatitur nga <strong>Studio EON<\/strong>:<\/p>\n<ul style=\"margin-bottom: 0; line-height: 1.8;\">\n<li><strong>Ndalimi Kategorik i Programeve Tradicionale p\u00ebr Njoftime:<\/strong> Ndaloni kategorikisht p\u00ebrdorimin e Outlook, Thunderbird apo Webmail p\u00ebr d\u00ebrgimin e cirkulareve, ftesave apo ofertave drejtuar m\u00eb shum\u00eb se 5 marr\u00ebsve t\u00eb jasht\u00ebm n\u00eb nj\u00eb mesazh t\u00eb vet\u00ebm.<\/li>\n<li><strong>Zbatimi i Sistemeve Profesionale t\u00eb D\u00ebrgimit (Newsletter \/ Mail Merge):<\/strong> P\u00ebrdorni platforma t\u00eb certifikuara (ose sisteme t\u00eb automatizuara brenda CRM-s\u00eb) q\u00eb gjenerojn\u00eb nj\u00eb email krejt\u00ebsisht individual p\u00ebr \u00e7do person, ku askush nuk e sheh adres\u00ebn e tjetrit.<\/li>\n<li><strong>Konfigurimi Teknik i Kufizimeve n\u00eb Server (Exchange \/ Google Workspace):<\/strong> K\u00ebrkojini administratorit tuaj t\u00eb IT-s\u00eb t\u00eb vendos\u00eb nj\u00eb rregull bllokimi (Transport Rule \/ DLP) q\u00eb nuk lejon nisjen e email-eve me m\u00eb shum\u00eb se 10 marr\u00ebs n\u00eb fushat &#8220;To&#8221; ose &#8220;CC&#8221; pa miratimin e administratorit.<\/li>\n<li><strong>Trajnimi i Sekretaris\u00eb dhe Stafit Administrativ:<\/strong> Gabimi njer\u00ebzor \u00ebsht\u00eb shkaku num\u00ebr nj\u00eb i rrjedhjes s\u00eb t\u00eb dh\u00ebnave. Siguroni instruksione t\u00eb qarta pune dhe trajnim t\u00eb stafit mbi r\u00ebnd\u00ebsin\u00eb e fush\u00ebs CCN dhe pasojat ligjore t\u00eb saj.<\/li>\n<li><strong>Procedura e Brendshme p\u00ebr Reagim t\u00eb Shpejt\u00eb (Incident Management):<\/strong> N\u00ebse gabimi ndodh, mos fshihni kok\u00ebn: aktivizoni menj\u00ebher\u00eb protokollin e verifikimit me DPO-n\u00eb ose konsulentin e specializuar t\u00eb Studio EON, vler\u00ebsoni d\u00ebmin dhe dokumentoni masat e marra n\u00eb Regjistrin e Incidenteve sipas Nenit 29 t\u00eb Ligjit Nr. 124\/2024.<\/li>\n<\/ul>\n<\/div>\n<p><em>Studio EON ofron auditim t\u00eb plot\u00eb t\u00eb siguris\u00eb s\u00eb kanaleve t\u00eb komunikimit, hartim t\u00eb rregulloreve t\u00eb brendshme p\u00ebr IT-n\u00eb dhe asistenc\u00eb t\u00eb specializuar ligjore e teknike p\u00ebr p\u00ebrputhshm\u00ebrin\u00eb me Ligjin Nr. 124\/2024 n\u00eb Shqip\u00ebri.<\/em><\/p>","protected":false},"excerpt":{"rendered":"<p>N\u00eb Shqip\u00ebri mbetet e p\u00ebrhapur praktika e d\u00ebrgimit t\u00eb njoftimeve masive me qindra email-e n\u00eb CC n\u00eb vend t\u00eb CCN-s\u00eb. Autoritetet evropiane sanksionojn\u00eb r\u00ebnd\u00eb k\u00ebt\u00eb shkelje si komunikim t\u00eb paligjsh\u00ebm dhe cenim t\u00eb siguris\u00eb: analiza e rrezikut dhe protokolli parandalues i Studio EON sipas Ligjit Nr. 124\/2024.<\/p>","protected":false},"author":1,"featured_media":27310,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[93],"tags":[],"class_list":["post-27311","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-lajme"],"_links":{"self":[{"href":"https:\/\/eonimpresa.albaniainsight.com\/en\/wp-json\/wp\/v2\/posts\/27311","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/eonimpresa.albaniainsight.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/eonimpresa.albaniainsight.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/eonimpresa.albaniainsight.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/eonimpresa.albaniainsight.com\/en\/wp-json\/wp\/v2\/comments?post=27311"}],"version-history":[{"count":0,"href":"https:\/\/eonimpresa.albaniainsight.com\/en\/wp-json\/wp\/v2\/posts\/27311\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/eonimpresa.albaniainsight.com\/en\/wp-json\/wp\/v2\/media\/27310"}],"wp:attachment":[{"href":"https:\/\/eonimpresa.albaniainsight.com\/en\/wp-json\/wp\/v2\/media?parent=27311"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/eonimpresa.albaniainsight.com\/en\/wp-json\/wp\/v2\/categories?post=27311"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/eonimpresa.albaniainsight.com\/en\/wp-json\/wp\/v2\/tags?post=27311"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}