- Enforcing jurisdiction
- Slovenia · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
DPA case N/A – Violation Found (Slovenia, 2021)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Slovenian authorities were told to provide clearer information about how vaccination data is collected. People applying for vaccinations were confused by vague information. This highlights the need for transparency when handling personal data.
What happened
Authorities were required to give clear and accurate information about personal data collection related to vaccinations.
Who was affected
Individuals expressing interest in vaccination through the eGovernment portal.
What the authority found
The authority ordered the Ministries and the National Institute of Public Health to ensure clear communication about data management.
Why this matters
This case stresses the importance of transparency in data collection. Organizations must communicate clearly about how they use personal data to maintain trust.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Entities Involved
Source checks
Archived or cached source text retrieved.
Review needed — 18 October 2026.
Processing notes: articles corrected, national law identified, entity split needed.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
In the Republic of Slovenia, in addition to applying for vaccination with a personal physician, a comprehensive data collection on vaccination interest is conducted in parallel via the eGovernment portal, which is not an application for vaccination. Individuals receive completely vague and meager information when applying for the vaccination expression of interest via the eGovernment portal, and additional ambiguity is introduced by various diametrically opposed interpretations of individual speakers at press conferences of the Government of the Republic of Slovenia regarding the significance of this role. On 15 March 2021, with the aim of protecting the rights of individuals, the IP issued a provisional decision to taxpayers - the Ministry of Public Administration (MPA), the Ministry of Health and the National Institute of Public Health (NIJZ) - imposing an obligation to provide clear, accurate and reliable information in accordance with Article 13 of the General Regulation (GDPR) - including who manages all personal data, what their purposes are and the legal basis for their processing - and restricting further processing of the personal data collected.
Outcome
Violation Found
The DPA found a violation but did not impose a fine.
Related Enforcement Actions (0)
No other enforcement actions found for DPA case N/A in SI
This is the only recorded action for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. DPA case N/A - Slovenia (2021). Retrieved from cookiefines.eu
Last updated: