Enforcing jurisdiction
Slovenia · Geography does not establish applicable law.
Confirmed applicable legislation
Privacy topics

Legal Entity – €16,650 Fine (Slovenia, 2025)

€16,650Informacijski pooblaščenec21 November 2025Slovenia
final
Fine

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

A legal entity in Slovenia was fined for not securing personal data stored on a public web server. The server could be accessed without proper safeguards, putting user data at risk. This ruling stresses the importance of securing personal data online.

What happened

The legal entity was fined for storing personal data on a publicly accessible server without adequate security measures.

Who was affected

Individuals whose personal data was stored on the unsecured server were affected.

What the authority found

The authority ruled that the entity did not take sufficient technical and organizational measures to protect personal data.

Why this matters

This case serves as a warning to all businesses about the necessity of implementing strong security measures for personal data. Companies must ensure their online systems are secure to protect user information.

Recorded legal citations
Automatically processed
Art. 32 GDPR
View original scraped data
Art. 32(GDPR)

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Linked-source text retrieved.

Review needed — 13 March 2026.

Processing notes: amount discrepancy, entity split needed.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The Slovenian DPA has imposed a fine of EUR 16,650 on a legal entity. The controller stored personal data on a publicly accessible web server without taking sufficient technical and organisational measures. The server could be accessed via a unique URL without additional safeguards, such as a password login. The entity was fined EUR 16,250, and the person responsible was fined EUR 400.

Details

Fine Date

21 November 2025

Authority

Informacijski pooblaščenec

Fine Amount

€16,650

Enforcement Tracker ID

ETid-3008

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Legal Entity - Slovenia (2025). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: