Slovenia: Personal Data Protection Act enters into force
The Information Commissioner ('the Commissioner') issued, on 26 January 2023, a statement reminding of the entry into force, on the same date, of the Personal Data Protection Act ('ZVOP-2'), following its publication, on 27 December 2022, in the Official Gazette. In particular, the Commissioner highlighted that the ZVOP-2 introduces some important changes, including:
- a revised regime on biometrics;
- additional requirements for data protection officers ('DPOs');
- specific requirements on data security, traceability, and Data Protection Impact Assessments ('DPIAs'); and
- the regulation of the processing of personal data for research, archival, and statistical purposes.
You can read the statement, only available in Slovenian, here.