Legal Entity – €75,474 Fine (Slovenia, 2025)

€75,474Informacijski pooblaščenec11 December 2025Slovenia
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

A Slovenian company was fined EUR 75,474 for secretly monitoring an employee's computer activities without a valid reason. This included tracking private messages and conversations. This case highlights the importance of respecting employee privacy and having a legal basis for monitoring.

What happened

The company installed software on an employee's work computer that allowed monitoring of all activities, including private communications.

Who was affected

The employee whose work computer was monitored without consent.

What the authority found

The authority found that the company lacked a valid legal basis for monitoring the employee's activities, violating GDPR requirements.

Why this matters

This ruling serves as a warning to companies about the legal risks of invasive monitoring practices. Businesses should ensure they have a clear legal basis before implementing monitoring software.

GDPR Articles Cited

AI-verified

Art. 5(1)(a) GDPR
Art. 6(1) GDPR
View original scraped data
Art. 5(1) a) GDPR
Art. 6(1) GDPR

Original data from scraper before AI verification against source document.

Source verified 10 March 2026
entity split needed
Full Legal Summary
Detailed

The Slovenian DPA has imposed a fine of EUR 75,474 on a legal entity. Without a sufficient legal basis, the controller installed software on an employee's work computer which allowed them to monitor all of the employee's activity on that computer, including private activity. The software also allowed the controller to monitor private communications via Facebook or email, as well as audio conversations. The entity was fined EUR 71,474, and the person responsible was fined EUR 4,000.

Related Enforcement Actions (7)

Other enforcement actions involving Legal Entity in SI

Details

Fine Date

11 December 2025

Authority

Informacijski pooblaščenec

Fine Amount

€75,474

Enforcement Tracker ID

ETid-3012

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Legal Entity - Slovenia (2025). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: