- Enforcing jurisdiction
- Slovenia · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Legal Entity – €2,200 Fine (Slovenia, 2025)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
A Slovenian company was fined EUR 2,200 because an employee shared health data with a lawyer without proper reasons. This action raised concerns about how personal health information is handled. It highlights the importance of following data protection rules to avoid penalties.
What happened
An employee forwarded health data to a lawyer without sufficient grounds.
Who was affected
Visitors whose health data was improperly shared by the company's employee.
What the authority found
The authority found that the company failed to protect personal data, leading to the fine under GDPR's requirements.
Why this matters
This case emphasizes the need for companies to implement strict data handling practices. It serves as a reminder that mishandling sensitive information can lead to significant fines.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Review needed — 16 March 2026.
Processing notes: articles corrected, national law identified, entity split needed.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Slovenian DPA has imposed a fine of EUR 2,200 on a legal entity. An employee of the company forwarded health data to a lawyer without sufficient grounds. The company was fined EUR 2,000, while the employee was fined EUR 200.
Related Enforcement Actions (2)
Other enforcement actions involving Legal Entity in SI
Fine
€2K
Details
Fine Date
22 July 2025
Authority
Informacijski pooblaščenec
Fine Amount
€2,200
Enforcement Tracker ID
ETid-3003
About this data
Cite as: Cookie Fines. Legal Entity - Slovenia (2025). Retrieved from cookiefines.eu
Last updated: