- Enforcing jurisdiction
- Slovenia · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Informacijski Pooblaščenec – Violation Found (Slovenia, 2020)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
The Information Commissioner in Slovenia provided guidance on how employers can handle employee data during the coronavirus pandemic. They clarified that while testing employees may be necessary, it must be done carefully and with respect for privacy. This guidance helps businesses understand their responsibilities during health crises.
What happened
The Information Commissioner advised on the conditions under which employers can require employees to get tested for coronavirus.
Who was affected
Employees who may be required to disclose health information to their employers.
What the authority found
The Commissioner stated that employers must justify the need for processing personal data and ensure it is appropriate and necessary.
Why this matters
This guidance highlights the balance between public health and personal privacy. Employers should be cautious and transparent when implementing health measures that involve personal data.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 22 March 2026.
Processing notes: articles corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
Following the receipt of a series of questions about what an employer could require from its employees in the context of halting the spread of coronavirus, the Information Commissioner issued an opinion addressing the questions referred. Whether in order to prevent the spread of coronavirus, an employer may make it mandatory for employees to get tested upon their return from holidays, require that they disclose the results of their test and provide the employer with information on which countries they will travel to for annual leave. In reference to the question of whether an employer can make it obligatory for an employee to get tested, the Information Commissioner held that it was beyond their competence to provide direct instructions on this. However, the Information Commissioner went on to state that in the context of preventing the spread of coronavirus, an employer must take a holistic approach to defining measures to curb the spread of infection. In particular, an employer must establish whether and to what extent measures that do not require the processing of personal data are sufficient, and in which individual cases the processing of certain personal data may be necessary. In such individual instances where the processing of personal data may be necessary, an employer must provide an appropriate legal basis for the processing, after having justified: 1. the appropriateness of the processing 2. the need for processing 3. the proportionality of the processing With regards to the question of whether an employer is entitled to the test results of their employee, the Information Commissioner held that although an employer must take into account the principle of data minimization, they are entitled to receive test results if it is appropriate, necessary, and proportionate within the context of each specific case. In reference to the question of whether the employer had the right to ask their employees for the details of their annual leave, the Informatio
Outcome
Violation Found
The DPA found a violation but did not impose a fine.
Related Enforcement Actions (0)
No other enforcement actions found for Informacijski Pooblaščenec in SI
This is the only recorded action for this entity in this jurisdiction.
Details
Decision Date
29 July 2020
Authority
Informacijski pooblaščenec
About this data
Cite as: Cookie Fines. Informacijski Pooblaščenec - Slovenia (2020). Retrieved from cookiefines.eu
Last updated: