Law note · Slovenia
Informacijski Pooblascenec Enforcement, GDPR Article 82, and ZVOP-2 Articles 114-116
Informacijski pooblascenec (the Information Commissioner) is Slovenia's supervisory authority. ZVOP-2 Articles 114-115, read directly, require the misdemeanor-law fining authority to weigh proportionality alongside General Data Protection Regulation (GDPR) Article 83(1) factors, and Article 115 allows a fast-track fine above the statutory minimum.
Article 116 requires processing operations under Article 23(1), which names biometric, health, and criminal or misdemeanor-record data as triggering categories, to come into compliance within three years of the law's entry into force. GDPR Article 82 arms an individual with a direct private right of action, exercised through ZVOP-2 Article 11's judicial-protection route.
What it asks of an app
- Expect the Information Commissioner to weigh proportionality alongside the General Data Protection Regulation (GDPR) Article 83(1) factors when setting a fine for processing personal data of a person in Slovenia, per ZVOP-2 Articles 114-115.
- Expect any person in Slovenia who suffered material or non-material damage from an infringement to have a direct GDPR Article 82 right to compensation, exercisable through ZVOP-2 Article 11's judicial-protection route.
When LexLint raises it
Declared activities: crawls_web, trains_models, deploys_chatbot, processes_biometrics, processes_voice
Primary source: ip-rs.si, ZVOP-2 Arts. 105, 114-116 (direct fetch)
GDPR Art. 82