Slovenia

Legal Entity

5,020 €

GDPR enforcement action by Slovenian Supervisory Authority (Informacijski pooblaščenec) on 2025-07-25.

Rank · Sector

#92

of 218 in Not assigned

Rank · Slovenia

#11

of 17

Rank · All fines

#1,682

of 3,042

Case details

Authority: Slovenian Supervisory Authority (Informacijski pooblaščenec)
Date: 2025-07-25
Controller / Processor: Legal Entity
Sector: Not assigned
Quoted Articles: Art. 32 GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Slovenian DPA has imposed a fine of EUR 5,020 on a legal entity. The controller had developed an application that allowed the exchange of personal data, but failed to implement technical measures to protect the programming interface when switching from the test environment to the production environment. This resulted in a data breach affecting approximately 100,000 users. The entity was fined EUR 4,820, and the person responsible was fined EUR 200.

Open original source Links to the regulator's original publication or another source.