Structural challenges affecting NHRI independence and effectiveness
ENNHRI’s reporting confirms that NHRIs in enlargement countries continue to face structural challenges that affect their ability to operate independently and effectively. The most persistent challenge, as noted above, remains insufficient and inadequate resources, particularly where NHRIs are expected to implement broad or expanding mandates. This was reported by the NHRIs in Albania, Bosnia and Herzegovina, Moldova, North Macedonia, and Ukraine. In Ukraine, the discrepancy between available resources and the scope of the institution’s mandates has been further exacerbated by martial law, attacks on infrastructure, the energy crisis and the growing complexity of digital complaints. In Albania, Bosnia and Herzegovina, and Moldova, limited financial and human resources continue to constrain NHRIs’ institutional capacity in practice.
Challenges related to financial autonomy and budget determination processes also remain significant. The Moldovan NHRI reported that the institution’s budget remains integrated into the general government budget process without a distinct budget line fully reflecting its independent status. The NHRI in Montenegro noted that, although its budget is formally provided through the State budget, the lack of full financial independence limits its ability to plan and implement activities across multiple mandates. The Ukrainian NHRI reported a continued reduction in funding for the NPM mandate since the full-scale invasion, affecting the institution’s ability to conduct regular monitoring visits and engage necessary experts.
NHRIs also reported persistent challenges in access to information, cooperation with authorities and follow-up to their recommendations. The Moldovan NHRI reported difficulties in accessing information from the Ministry of Defence. The Georgian NHRI highlighted selective obstruction by several public authorities, including law enforcement, penitentiary, judicial and municipal bodies, reporting particular obstacles to effective cooperation with law enforcement authorities during mass detention events.
Low or inconsistent implementation of NHRI recommendations remains a cross-cutting challenge, reported by the ENNHRI members in Albania, Bosnia and Herzegovina, Georgia, North Macedonia and Serbia, with the ones in Albania and Kosovo* further highlighting limited parliamentary follow-up to their reports and recommendations. The Georgian NHRI provided detailed data showing that only a small proportion of recommendations to state authorities were fully implemented, while the Serbian NHRI distinguished between more frequent implementation of individual recommendations and weaker follow-up to systemic recommendations requiring broader institutional reforms. These challenges demonstrate that the effectiveness of NHRI mandates depends not only on formal legal competences but also on the willingness of state institutions to cooperate with and act upon NHRIs ‘findings and recommendations.
Threats and attacks against NHRIs
Similar to the concerns raised by the NHRIs in the EU, several NHRIs in enlargement states reported threats, attacks or attempts to undermine their credibility and effectiveness. These included online attacks, defamatory campaigns, verbal attacks, obstruction in carrying out mandates and, in some cases, security-related threats. The NHRIs in Georgia, Moldova, Montenegro, and Ukraine reported online attacks or disinformation campaigns against the institutions or their work. The Ukrainian NHRI also reported cybersecurity threats, including phishing attacks targeting staff credentials, and documented verbal attacks and threats against the institution, leadership and employees, particularly in digital spaces.
The NHRI in Georgia reported disinformation campaigns and defamatory narratives, including statements by high-ranking public figures, aimed at undermining public trust in the Public Defender’s Office. An emerging trend is that reputational attacks may originate not only from public authorities but also from private actors, as reported by the Georgian NHRI in relation to attacks linked to a discrimination case. The NHRI in Bosnia and Herzegovina reported verbal attacks and narratives questioning the relevance of the institution, linked to a general misunderstanding of NHRIs' attributed mandates and responsibilities, which exclude executive powers as foreseen under international standards. The NHRIs in Montenegro and Ukraine also reported threats and intimidation, including gender-based threats directed at leadership and staff.
Beyond these structural patterns, some NHRIs also reported more direct obstruction in the course of specific operational activities. The Georgian NHRI reported barriers to timely access during detention-related monitoring visits, while NHRIs in Ukraine and Montenegro reported obstruction directly affecting the implementation of specific institutional functions.
Responses to threats and measures to strengthen resilience
NHRIs are developing a range of responses to strengthen institutional resilience. Some NHRIs rely on constitutional, legislative and criminal-law safeguards protecting the independence and immunity of mandate holders and staff. The Georgian NHRI reported constitutional and legal safeguards, including criminal sanctions for exerting pressure on the Public Defender. The Serbian NHRI highlighted statutory mechanisms enabling the Protector of Citizens to respond to threats, while the NHRI in Bosnia and Herzegovina noted that the institution benefits from a certain level of functional immunity in carrying out their duties and can draw on the general civil and criminal law protection measures available to all entities, including the possibility of reporting attacks that amount to criminal offences to the competent authorities, primarily the Ministries of Internal Affairs, but considered these general safeguards insufficient and called for dedicated security and support mechanisms tailored to the institution.
Several NHRIs reported internal measures to improve preparedness and response. The Ukrainian NHRI reported systematic monitoring of risks, strengthened internal coordination, improved cyber and information security procedures, and rapid-response mechanisms for interference with online activities. The Albanian NHRI reported development and adoption of the internal policies aimed at ensuring institutional integrity, transparency, and stable decision-making. The NHRI in Montenegro highlighted internal procedures, staff training, digital security, transparent public communication and cooperation with civil society and international partners as the key step to strengthen the response to threats.
A further trend concerns the use of public communication, transparency and evidence-based follow-up as resilience tools. The Georgian NHRI publicly responded to disinformation campaigns and defamatory narratives, while the NHRI in Serbia relied on public reporting, reasoned recommendations and regular communication with the National Assembly and the public as safeguards against undue influence. The Georgian NHRI also introduced a more analytical follow-up approach, including quantified data on recommendation implementation and direct meetings with state authorities. This indicates a shift from reactive responses to more structured accountability and resilience-building practices.
NHRIs also emphasised the importance of strategic partnerships with domestic, regional and international actors. Several institutions identified ENNHRI as an important source of peer support, solidarity, advocacy and technical assistance. The Ukrainian NHRI highlighted cooperation with ENNHRI and other regional mechanisms to exchange information and mobilise support in response to threats. The Albanian NHRI noted that ENNHRI and other partners can assist the institution through public statements, advocacy and institutional solidarity. The NHRIs in Bosnia and Herzegovina and Serbia also underlined the value of ENNHRI’s peer support, exchange of good practices and institutional backing as an additional layer of protection for NHRI independence and effectiveness.
Overall, enlargement-country NHRIs face challenges that broadly mirror those reported by EU NHRIs, including insufficient resources, weak follow-up to recommendations, access-to-information barriers and attacks on institutional credibility. However, enlargement-country NHRIs also face specific pressures linked to conflict, restricted-access territories, weaker parliamentary follow-up and more fragile institutional safeguards. Strengthening NHRI resilience therefore requires not only adequate resources and legal protections, but also systematic involvement in human rights-related policymaking, stronger follow-up by public authorities, and continued regional support through ENNHRI and other European actors.
ENNHRI will continue supporting NHRIs in enlargement countries through peer exchange, capacity-building, advocacy and solidarity actions. In line with ENNHRI’s Strategic Plan 2026–2030, particular attention will be given to strengthening NHRI resilience, supporting institutions facing threats or pressure, promoting implementation of the UN Paris Principles, and enhancing NHRI capacity to address emerging challenges, including digitalisation, conflict-related human rights issues, shrinking civic space and the implementation of multiple specialised mandates.