Sanction RGPD Slovenian Supervisory Authority (Informacijski pooblaščenec) — Legal Entity : 5 k€ (2025)
- Autorité de contrôle
- Slovenian Supervisory Authority (Informacijski pooblaščenec)
- Pays
- Slovénie
- Entreprise / secteur
- Legal Entity
- Montant de l'amende
- 5 k€
- Date de la décision
- 25 juillet 2025
- Fondement juridique
- Art. 32
- Manquement
- Mesures techniques et organisationnelles insuffisantes
Résumé des faits
The Slovenian DPA has imposed a fine of EUR 5,020 on a legal entity. The controller had developed an application that allowed the exchange of personal data, but failed to implement technical measures to protect the programming interface when switching from the test environment to the production environment. This resulted in a data breach affecting approximately 100,000 users. The entity was fined EUR 4,820, and the person responsible was fined EUR 200.
Décision officielle
Slovenian Supervisory Authority (Informacijski pooblaščenec)