- Enforcing jurisdiction
- Slovenia · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
DPA case 0613-438/2019/16 – Violation Found (Slovenia, 2021)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
A controller in Slovenia published an article that linked to a file containing personal data of several individuals without ensuring proper security. This is important because it shows that organizations must take steps to protect personal data from unauthorized access.
What happened
The controller published a file online that contained personal data without adequate security measures.
Who was affected
Individuals whose personal data was included in the published file.
What the authority found
The authority found that the controller failed to secure personal data as required by GDPR rules.
Why this matters
This ruling underscores the responsibility of organizations to protect personal data. It highlights the need for strong security measures when handling sensitive information.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 18 October 2026.
Processing notes: articles corrected, national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
A controller published online an article linking to a file - a criminal complaint that contained personal data of several individuals. In doing so, the controller did not ensure adequate security of personal data. The DPA held that the controller must, in accordance with Article 32 GDPR: (a) cover, delete or otherwise ensure an adequate level of security of the birth data of the persons to whom it relates; (b) secure the ID data and the data on the residence of the persons to whom it relates in such a way that it cannot be accessed; and (c) secure the remaining personal data in such a way as to prevent unauthorized disclosure of or access to such personal data.
Outcome
Violation Found
The DPA found a violation but did not impose a fine.
Related Enforcement Actions (0)
No other enforcement actions found for DPA case 0613-438/2019/16 in SI
This is the only recorded action for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. DPA case 0613-438/2019/16 - Slovenia (2021). Retrieved from cookiefines.eu
Last updated: