- Enforcing jurisdiction
- Slovenia · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
DPA case 0603-98/2022/6 – Violation Found (Slovenia, 2022)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
A Slovenian data protection authority reprimanded a person for sharing private information via email with unauthorized recipients. They found that the individual had no legal basis for sharing the data but did not impose a fine due to mitigating circumstances. This case highlights the importance of understanding data sharing rules.
What happened
An individual forwarded an email containing personal data to 46 unauthorized recipients.
Who was affected
Individuals whose personal information was shared without consent.
What the authority found
The Slovenian authority ruled that the individual lacked a legal basis for sharing the data.
Why this matters
This ruling serves as a reminder that even unintentional data sharing can lead to consequences. Businesses should train employees on data protection rules to avoid similar issues.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Archived or cached source text retrieved.
Automated check recorded — 18 October 2026.
Processing notes: articles corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
An individual (controller) forwarded an e-mail containing the residential address and date of birth of some individuals to 46 unauthorized recipients. Therefore, the DPA opened an investigation. The DPA considered that the controller could not rely on any legal basis for this processing, in breach of Article 6(1) GDPR. However, the DPA took into account that the 46 recipients included mainly state authorities and lawyers, who, in accordance with the national law are bound by professional secrecy. The DPA considered this as mitigating circumstances and decided to not impose a fine. It issued a reprimand for the lack of legal basis.
Outcome
Violation Found
The DPA found a violation but did not impose a fine.
Related Enforcement Actions (0)
No other enforcement actions found for DPA case 0603-98/2022/6 in SI
This is the only recorded action for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. DPA case 0603-98/2022/6 - Slovenia (2022). Retrieved from cookiefines.eu
Last updated: