Slovenia

Utility Company

6,600 €

GDPR enforcement action by Slovenian Supervisory Authority (Informacijski pooblaščenec) on 2026-04-15.

Rank · Sector

#259

of 597 in Industry and Commerce

Rank · Slovenia

of 17

Rank · All fines

#1,590

of 3,050

Case details

Authority: Slovenian Supervisory Authority (Informacijski pooblaščenec)
Date: 2026-04-15
Controller / Processor: Utility Company
Sector: Industry and Commerce
Quoted Articles: Art. 5 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Slovenian DPA has imposed a fine of EUR 6,600 on a utility company and a responsible person within the company. The company tracked its employees using GPS trackers installed in company vehicles which ran continuously and indiscriminately. The controller had no legal basis for this data processing and did not consider less intrusive methods to achieve the same purpose. Additionally, the controller failed to adequately inform the data subjects about the processing. The fine had been split up into a fine in the amount of EUR 6,000 for the company and EUR 600 for the employee responsible.

Open original source Links to the regulator's original publication or another source.