The right to personal data protection is an individual right whose importance and dynamics changes according to the latest developments in technology. In addressing the developments that influence the protection of personal data, special attention should be paid to the mechanism for ensuring such protection. The right to protection of personal data is guaranteed by international and national legislation, including mechanisms for the implementation of such legislation. Data protection rights are also provided for by law in Slovenia and Kosovo. However, there are a few differences in the way the two legal regimes regulate this area, especially in terms of monetary sanctions. This article aims to compare the imposition of monetary sanctions in both countries, focusing on the role of the implementing institution in imposing fines and the role of courts in this process. The analysis concludes that the lack of authority to impose fines on the part of the implementing institution has a negative effect on the protection of personal data.