- Enforcing jurisdiction
- Slovenia · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
DPA case 07120-1/2020/628 – Violation Found (Slovenia, 2020)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
A public institution was advised on how to handle the openness of its council meetings when discussing personal data. The authority emphasized the need for a legal basis for processing personal data in these meetings. This guidance helps ensure transparency while protecting individuals' privacy.
What happened
The authority advised that public meetings must have a legal basis when discussing personal data.
Who was affected
Members of the public who may attend council meetings where personal data is discussed.
What the authority found
The data protection authority suggested that the institution clarify its rules for opening meetings to the public while protecting personal data.
Why this matters
This advice underscores the balance between transparency in public institutions and the need to protect personal information. Public bodies should establish clear policies for handling sensitive data.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Secondary-source text retrieved.
Automated check recorded — 18 October 2026.
Processing notes: national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
According to the complainant, the draft statute of the council institution would state that its sessions are not public, but the council can open them. In his view, the meetings are "per se" closed to the public. What are the legal bases for opening the council meetings to the public? According to the DPA, the public institution can determine in its statute when it will open or close the meeting or part of the meeting to the public. The public session is not a requirement that would be determined by a special law for public institutions and does not fall within the scope of the right of access to public information provided by the ZDIJZ. The DPA claimed that in cases where personal data is discussed at the council's meetings, one of the legal bases for the processing of personal data from Article 6(1) GDPR must be provided. The DPA suggested to determine the rules regarding the openness of meetings and in the case of dealing with personal data, close the specific meeting (partially) to the public, or provide an appropriate legal basis. The DPA pointed out that consent in the public sector can be given in accordance with the first paragraph of Article 9 of ZVOP-1 (which is still used to a certain extent until the adoption of ZVOP-2) when the law stipulates that certain personal data are processed only based on the personal consent of the individual. The DPA has repeatedly emphasized in the past that the consent of an individual can be given without prior definition in the law only if it is not a matter of performing public tasks.
Outcome
Violation Found
The DPA found a violation but did not impose a fine.
Related Enforcement Actions (0)
No other enforcement actions found for DPA case 07120-1/2020/628 in SI
This is the only recorded action for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. DPA case 07120-1/2020/628 - Slovenia (2020). Retrieved from cookiefines.eu
Last updated: