Legal Entity
2,200 €
GDPR enforcement action by Slovenian Supervisory Authority (Informacijski pooblaščenec) on 2025-07-22.
Rank · Sector
#134
of 218 in Not assigned
Rank · Slovenia
#14
of 17
Rank · All fines
#2,210
of 3,050
Case details
- Authority
- Slovenian Supervisory Authority (Informacijski pooblaščenec)
- Date
- 2025-07-22
- Controller / Processor
- Legal Entity
- Sector
- Not assigned
- Quoted Articles
- Art. 6 (1) GDPR, Art. 9 GDPR
- Type of violation
- Insufficient legal basis for data processing
Summary
The Slovenian DPA has imposed a fine of EUR 2,200 on a legal entity. An employee of the company forwarded health data to a lawyer without sufficient grounds. The company was fined EUR 2,000, while the employee was fined EUR 200.
Open original source
Links to the regulator's original publication or another source.
Related fines
Slovenia
2025-12-11
75,474 €
ETid-3012
RIEDL PRECISION d.o.o.
Employment
Slovenia
2025-11-21
16,650 €
ETid-3008
Legal Entity
Not assigned
Slovenia
2025-05-14
16,000 €
ETid-3002
Oddaja sob
Accomodation and Hospitality
Slovenia
2026-03-27
13,491 €
ETid-3110
Legal Person
Not assigned
Slovenia
2025-07-29
11,614 €
ETid-3006
Legal Entity
Not assigned
Slovenia
2025-11-26
6,600 €
ETid-3009
Legal Entity
Employment