Unknown – €5,500 Fine (Slovenia, 2026)

€5,500Informacijski pooblaščenec16 February 2026Slovenia
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

The Slovenian DPA has imposed a fine of EUR 5,500 on a unkonwn company and a responsible person within the company. The controller failed to implement adequate technical and organisational measures to ensure data security by giving employees access to customer data that was not necessary for them to fulfil their duties. This resulted in a data breach. Additionally, the controller had been warned regarding the information obligations under Art. 12 and Art. 13 GDPR. The fine had been split up into a fine in the amount of EUR 5,400 for the company and EUR 100 for the employee responsible.

GDPR Articles Cited

Art. 32(GDPR)
Full Legal Summary

The Slovenian DPA has imposed a fine of EUR 5,500 on a unkonwn company and a responsible person within the company. The controller failed to implement adequate technical and organisational measures to ensure data security by giving employees access to customer data that was not necessary for them to fulfil their duties. This resulted in a data breach. Additionally, the controller had been warned regarding the information obligations under Art. 12 and Art. 13 GDPR. The fine had been split up into a fine in the amount of EUR 5,400 for the company and EUR 100 for the employee responsible.

Details

Fine Date

16 February 2026

Authority

Informacijski pooblaščenec

Fine Amount

€5,500

Enforcement Tracker ID

ETid-3109

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Unknown - Slovenia (2026). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: