- Enforcing jurisdiction
- Slovenia · Geography does not establish applicable law.
- Confirmed applicable legislation
- No confirmed legal basis recorded.
- Privacy topics
DPA case 0603-46/2023/13 – Violation Found (Slovenia, 2023)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
In Slovenia, a company was found to have improperly used video surveillance without adequately informing people. The data protection authority noted that the notice about the surveillance was not placed where individuals could see it before entering the area. This ruling underscores the need for clear communication about surveillance practices.
What happened
A company used video surveillance but failed to properly inform individuals about it.
Who was affected
Individuals entering the company's premises who were not adequately informed about the video surveillance.
What the authority found
The authority ruled that the company did not meet its obligation to notify individuals about the video surveillance, breaching data protection rules.
Why this matters
This case serves as a reminder for businesses to ensure that their surveillance practices are transparent and that individuals are informed beforehand. Proper signage and communication are essential for compliance.
Source checks
Archived or cached source text retrieved.
Automated check recorded — 18 October 2026.
Processing notes: articles corrected, national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Slovenian DPA carried out an investigation in the premises of a controller, following a complaint regarding their use of video surveillance and the lack of adequate notice for its use. The controller had their premises under video surveillance. The video surveillance presented an information notice. However, this notice was not placed in a way that would allow for an individual to be informed about the surveillance before entering the premises and to decide whether they wanted to be in the area covered by the video surveillance. The Slovenian DPA held that the controller had failed to comply with its duty to ensure that data subjects were notified of the controller's use of video surveillance. As such, the controller had violated [http://www.pisrs.si/Pis.web/pregledPredpisa?id=ZAKO7959 Article 76(3) ZVOP-2]. The controller had displayed an information notice for their use of video surveillance. However, this notice was not placed in a way that would allow for an individual to be informed about the surveillance before entering the premises and to decide whether they wanted to be in the area covered by the video surveillance. The DPA found the placement of the notice to breach of [http://www.pisrs.si/Pis.web/pregledPredpisa?id=ZAKO7959 Article 76(3) ZVOP-2]. As a result, the DPA held the controller liable on the basis of [http://www.pisrs.si/Pis.web/pregledPredpisa?id=ZAKO7959 Article 100(3) ZVOP-2] in conjunction with [http://www.pisrs.si/Pis.web/pregledPredpisa?id=ZAKO7959 Article 100(1)(2) ZVOP-2], and issued a reprimand.
Outcome
Violation Found
The DPA found a violation but did not impose a fine.
Related Enforcement Actions (0)
No other enforcement actions found for DPA case 0603-46/2023/13 in SI
This is the only recorded action for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. DPA case 0603-46/2023/13 - Slovenia (2023). Retrieved from cookiefines.eu
Last updated: