Slovenia Slovenia

Legal Entity

2,200 €

GDPR enforcement action by Slovenian Supervisory Authority (Informacijski pooblaščenec) on 2025-07-22.

Rank · Sector
#134
of 218 in Not assigned
Rank · Slovenia
#14
of 17
Rank · All fines
#2,210
of 3,050

Case details

Authority
Slovenian Supervisory Authority (Informacijski pooblaščenec)
Date
2025-07-22
Controller / Processor
Legal Entity
Sector
Not assigned
Quoted Articles
Art. 6 (1) GDPR, Art. 9 GDPR
Type of violation
Insufficient legal basis for data processing

Summary

The Slovenian DPA has imposed a fine of EUR 2,200 on a legal entity. An employee of the company forwarded health data to a lawyer without sufficient grounds. The company was fined EUR 2,000, while the employee was fined EUR 200.

Open original source Links to the regulator's original publication or another source.

Related fines