- Enforcing jurisdiction
- Slovenia · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
DPA case 07121-1 / 2020/2263 – Violation Found (Slovenia, 2020)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
A gym teacher asked students to submit videos of themselves dancing for an online class, raising questions about privacy. The authority clarified that consent is not always the right basis for processing students' data. This case stresses the need for careful handling of children's personal information.
What happened
The gym teacher requested students to submit videos of their dancing for an online classroom.
Who was affected
Students whose videos were requested by the gym teacher.
What the authority found
The authority stated that consent is not an appropriate legal basis for processing students' data in this context.
Why this matters
This case serves as a reminder for schools and teachers to be cautious about how they collect and use students' personal data. It emphasizes the importance of data minimization and compliance with data protection laws.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Secondary-source text retrieved.
Automated check recorded — 18 October 2026.
Processing notes: articles corrected, national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Slovenian IP was requested to advise upon the legality of a gym teacher’s decision to ask children to be recorded dancing and submit the video to an online classroom. Is article 6 (1) (c) GDPR the appropriate legal basis for a legitimate processing of the students’ data? The Slovenian DPA does not find itself competent on deciding upon an individual school’s decision (article 2 ZlnfP), but can provide clarifications concerning legal data processing. The competent body according to the IP is the Ministry of Education. In that light and according to article 6 (1) GDPR, the IP considers consent as a non-appropriate legal basis for processing students’ data. Schools and teachers must be compliant with the provisions of article 6 GDPR and in particular with the principle of data minimization, according to which data collected and processed, should not be held or further used unless this is essential. In the case of the gym classroom the controller must not process more personal data than the strictly necessary for the educational process. Article 32 GDPR must also apply to ensure the adequate level of data security.
Outcome
Violation Found
The DPA found a violation but did not impose a fine.
Related Enforcement Actions (0)
No other enforcement actions found for DPA case 07121-1 / 2020/2263 in SI
This is the only recorded action for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. DPA case 07121-1 / 2020/2263 - Slovenia (2020). Retrieved from cookiefines.eu
Last updated: