Slovenia: Commissioner clarifies collectors of support signatures for political purposes are data controllers
The Information Commissioner ('the Commissioner') issued, on 19 September 2022, a statement concerning the public collection of support signatures for political purposes. In particular, the Commissioner stated that the above mentioned activity constitues a processing of personal data under the General Data Protection Regulation (Regulation (EU) 2016/679) ('GDPR'). Accordingly, the Commissioner clarified that every collector of signatures is a data controller and is therefore obliged to ensure GDPR-compliant processing of personal data. More in detail, the Commissioner stated that collectors of signatures must ensure adequate security of personal data (e.g. against loss), and provide individuals with information about the processing of their personal data in accordance with Article 13 of the GDPR.
You can read the statement, only available in Slovenian, here.