In an environment where technology directly impacts how companies operate, system protection, information security, and the fulfillment of legal obligations can no longer be treated as separate issues. An issue on a website can affect a company's business continuity, customer data, and contractual relationships. At the same time, the technical solution to a problem does not necessarily answer all questions regarding business responsibilities and statutory legal obligations.

For this reason, UPWeb Services and Petani Law & Tax have pooled their expertise to develop an integrated approach where technological solutions and legal counseling work hand-in-hand for concrete business needs. This collaboration aims to provide companies with coordinated support in assessing digital systems, identifying risks, protecting data, and understanding the responsibilities tied to their operations. Depending on client needs, this approach can include reviewing systems and procedures, evaluating documentation and contracts, and guidance on measures to take when a problem arises.

The value of this cooperation lies in the coordination of these two fields. A technological issue is better understood when its legal consequences are also examined, while legal advice is more effective when backed by accurate information on the state of the systems.

A Collaboration Materialized in the Creation of LISA

One concrete example of the cooperation between UPWeb Services and Petani Law & Tax is LISA, a system built jointly by both parties, combining professional insights with technological development. LISA represents an approach where technology is not developed in isolation from user needs, but is built through cooperation between those who understand professional processes and those who translate these needs into technical solutions.

While the concrete functions of LISA should be described according to the features the system actually provides, its very creation highlights the importance of collaboration between professional expertise and technological development. This is the guiding principle of the partnership: technology and law must not act in isolation when business needs require a coordinated response.

PHP2Shell: When a Technological Vulnerability Becomes a Business Issue

The importance of this approach becomes clearer when looking at real digital security cases. In October 2026, notices were published regarding two critical vulnerabilities in PHP, identified by codes CVE-2026-109618 and CVE-2026-109619, collectively known as PHP2Shell. According to security advisories, exploiting them on affected systems could enable remote code execution without prior authentication. Security updates were released for the respective versions.

PHP is used to power many websites and web applications. When a vulnerability affects the technology itself, updating a theme or page content does not necessarily solve the problem. The version of PHP being used must be checked and the measures recommended by official sources implemented. For businesses, this is more than a routine maintenance issue. If a vulnerability is successfully exploited, it can cause consequences for platform functionality, information security, and, depending on the circumstances, personal data.

However, the existence of a vulnerability does not automatically prove that a company has been attacked or that its data has been exposed. This must be determined through system verification and factual review. In such a situation, UPWeb Services can contribute to technical assessment and determine necessary measures for the systems it covers. Concurrently, Petani Law & Tax can evaluate potential legal liabilities, including those related to personal data, contracts, and stakeholder communication.

This is why a technological problem should not be treated merely as a server intervention. When circumstances require it, it must also be examined in relation to its impact on the business and its obligations.

What Does This Mean for Businesses in Albania?

In Albania, Law No. 124/2024, "On the Protection of Personal Data," outlines obligations concerning the processing and security of personal data. A company that administers customer, employee, or other data must evaluate how it collects, uses, and protects that data. Security measures must be appropriate to the nature of the processing and the potential risks.

When a personal data breach occurs, obligations may arise to notify the competent authority and, in cases specified by law, inform the affected individuals. The fulfillment of these obligations depends on concrete circumstances and relevant legal conditions.

A published vulnerability does not in itself constitute a personal data breach. Therefore, it is important to first determine whether an incident occurred and whether it affected personal information. Through collaboration, technical assessment helps clarify what happened, while Petani Law & Tax's guidance helps interpret obligations and determine the necessary steps under Albanian law.

The same approach applies to contracts. Agreements between companies, clients, and service providers must clearly define responsibilities for system administration, maintenance, security, and incident handling. Responsibility cannot be determined solely by the fact that a problem occurred; it is evaluated against the parties' obligations and the circumstances of the case.

From Reaction to Preparation

A responsible approach does not start only when an incident occurs. It also includes the preliminary assessment of systems, review of procedures, and clarification of obligations. Depending on a company's needs, cooperation between UPWeb Services and Petani Law & Tax may involve assessing digital systems, identifying improvement needs, reviewing documentation and contracts, and guiding personal data protection. When an incident occurs, both parties contribute according to their field of expertise—one in technical assessment and handling, the other in reviewing legal consequences and obligations. Concrete involvement and division of responsibilities are defined according to the engaged service and client needs. The goal is not to promise the elimination of every risk, as that cannot be guaranteed, but to give the business greater clarity on system status, applicable obligations, and informed decision-making.

A Partnership Built on Real Business Needs

The cooperation between UPWeb Services and Petani Law & Tax aims to create a more coordinated way of handling issues that link technology with business responsibilities. Through UPWeb Services' technological expertise and Petani Law & Tax's legal and tax expertise, companies can seek support for issues affecting digital systems, information protection, contractual relationships, and legal compliance.

The joint creation of LISA makes this partnership tangible, showing that the intertwining of these two fields goes beyond counseling, materializing directly in the development of technological solutions. For businesses seeking to better understand risks, organize processes, and make informed decisions, what matters is not just solving a specific problem, but how technology and law can work together for their needs.

Petani Law & Tax & UPWeb Services — a collaboration that combines technological development with legal expertise to provide businesses with coordinated support in an increasingly digital environment.