Sanction RGPD Slovenian Supervisory Authority (Informacijski pooblaščenec) — Legal Entity : 17 k€ (2025)
- Autorité de contrôle
- Slovenian Supervisory Authority (Informacijski pooblaščenec)
- Pays
- Slovénie
- Entreprise / secteur
- Legal Entity
- Montant de l'amende
- 17 k€
- Date de la décision
- 21 novembre 2025
- Fondement juridique
- Art. 32
- Manquement
- Mesures techniques et organisationnelles insuffisantes
Résumé des faits
The Slovenian DPA has imposed a fine of EUR 16,650 on a legal entity. The controller stored personal data on a publicly accessible web server without taking sufficient technical and organisational measures. The server could be accessed via a unique URL without additional safeguards, such as a password login. The entity was fined EUR 16,250, and the person responsible was fined EUR 400.
Décision officielle
Slovenian Supervisory Authority (Informacijski pooblaščenec)