Enforcing jurisdiction
Slovenia · Geography does not establish applicable law.
Confirmed applicable legislation
Privacy topics

Legal Entity – €5,020 Fine (Slovenia, 2025)

€5,020Informacijski pooblaščenec25 July 2025Slovenia
final
Fine

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

A legal entity in Slovenia was fined €5,020 for failing to protect personal data in an application. The lack of security measures led to a data breach affecting around 100,000 users. This case emphasizes the importance of implementing strong data protection measures.

What happened

The legal entity did not secure its application properly, resulting in a data breach.

Who was affected

Approximately 100,000 users whose personal data was compromised due to the lack of security measures.

What the authority found

The Slovenian DPA fined the entity for not implementing necessary technical measures to protect personal data.

Why this matters

This case serves as a warning for companies to prioritize data security. Implementing robust security measures is essential to protect user data and avoid significant fines.

Recorded legal citations
Automatically processed
Art. 32 GDPR
View original scraped data
Art. 32(GDPR)

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Secondary-source text retrieved.

Review needed — 14 March 2026.

Processing notes: amount discrepancy, entity split needed.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The Slovenian DPA has imposed a fine of EUR 5,020 on a legal entity. The controller had developed an application that allowed the exchange of personal data, but failed to implement technical measures to protect the programming interface when switching from the test environment to the production environment. This resulted in a data breach affecting approximately 100,000 users. The entity was fined EUR 4,820, and the person responsible was fined EUR 200.

Details

Fine Date

25 July 2025

Authority

Informacijski pooblaščenec

Fine Amount

€5,020

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Legal Entity - Slovenia (2025). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: