Slovenia: Commissioner publishes 2022 activity report
The Information Commissioner (the Commissioner) published, on May 25, 2023, its 2022 annual activity report. In particular, the Commissioner noted that, in the reporting year, important steps were taken, as the National Assembly adopted the new Personal Data Protection Act (ZVOP-2) in December 2022. Moreover, the Commissioner highlighted that it had received 1,030 complaints, 160 of which related to the infringement of data subject rights.
Regarding monetary penalties, the Commissioner explained that the ZVOP-2 entered into force on January 26, 2023, and as such, during the reporting period, it could not impose fines for violations of the General Data Protection Regulation (GDPR). In this regard, the Commissioner noted that practice will show whether the approach chosen by the legislator with ZVOP-2 for the imposition of fines under the GDPR in the Slovenian legal system is legally sustainable.
In addition, the Commissioner reported that it had received 86 data breach notifications pursuant to Article 33 of the GDPR.