Slovenia

Unknown

4,850 €

GDPR enforcement action by Slovenian Supervisory Authority (Informacijski pooblaščenec) on 2026-01-20.

Rank · Sector

#100

of 218 in Not assigned

Rank · Slovenia

#13

of 17

Rank · All fines

#1,854

of 3,050

Case details

Authority: Slovenian Supervisory Authority (Informacijski pooblaščenec)
Date: 2026-01-20
Controller / Processor: Unknown
Sector: Not assigned
Quoted Articles: Art. 25 GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Slovenian DPA has imposed a fine of EUR 4,850 on a unkonwn company and a responsible person within the company. The controller operated a testenfiroment accesseble with a publicly availble username and password in which real personal data and not testdata had been processed. The fine had been split up into a fine in the amount of EUR 4,650 for the company and EUR 200 for the employee responsible.

Open original source Links to the regulator's original publication or another source.