Albania Law No. 9887 on Protection of Personal Data

National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.


Short name	AL L9887
Region	Europe
Country or scope	Albania
Sector	Privacy
In your workspace	Off until you switch it on in Compliance › Manage.

How Safeguard covers AL L9887

Scan requirements: 5, all decided by a scan.
Controls: the scan requirements below.
Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
Policy templates: 22 from the standard set.

How each kind of coverage works, and what the readiness score counts: Compliance frameworks.

Each scan of a product checks these 5 requirements against what the scan found, including the product's software inventory (SBOM).

Requirement	What Safeguard checks	Decided by
`AL-9887-27` Security of Personal Data	Controllers must take organizational and technical measures to protect personal data from accidental or unlawful destruction, loss and unauthorized access or alteration; component integrity hashes evidence protection against tampering (Law 9887 Art. 27)	Scan
`AL-9887-PROC` Processing by Processors	Processing carried out on the controller's behalf must rest on a contract obliging the processor to equivalent security, requiring the controller to know the suppliers behind its processing software (Law 9887 processor provisions)	Scan
`AL-9887-NOT` Notification of Processing	Controllers must notify the Commissioner of the processing they perform, which presupposes maintaining an inventory of the software systems and components that process personal data (Law 9887 notification provisions)	Scan
`AL-9887-VER` Maintained Security Level	The required security level must be maintained against evolving risks, which requires knowing exact versions of deployed components so weaknesses can be assessed and remediated (Law 9887 Art. 27 ongoing-security duty)	Scan
`AL-9887-DOC` Documented Safeguards	Controllers must be able to document the protective measures applied to processing systems, supported by a formally identified, timestamped software record (Law 9887 documentation duties)	Scan

All 22 from the standard set, adapted to AL L9887.