Sanction RGPD Slovenian Supervisory Authority (Informacijski pooblaščenec) — Utility Company : 7 k€ (2026)
Le 15 avril 2026, Slovenian Supervisory Authority (Informacijski pooblaščenec) a prononcé une sanction RGPD de 7 k€ à l'encontre de Utility Company (secteur : Industrie et commerce), sur le fondement de Art. 5, pour base légale insuffisante pour le traitement. Référence de décision : dco-sanc-3111.
- Autorité de contrôle
- Slovenian Supervisory Authority (Informacijski pooblaščenec)
- Pays
- Slovénie
- Entreprise / secteur
- Utility Company
- Montant de l'amende
- 7 k€
- Date de la décision
- 15 avril 2026
- Fondement juridique
- Art. 5
- Manquement
- Base légale insuffisante pour le traitement
- Référence de décision
- dco-sanc-3111
Résumé des faits
The Slovenian DPA has imposed a fine of EUR 6,600 on a utility company and a responsible person within the company. The company tracked its employees using GPS trackers installed in company vehicles which ran continuously and indiscriminately. The controller had no legal basis for this data processing and did not consider less intrusive methods to achieve the same purpose. Additionally, the controller failed to adequately inform the data subjects about the processing. The fine had been split up into a fine in the amount of EUR 6,000 for the company and EUR 600 for the employee responsible.
Décision officielle
Slovenian Supervisory Authority (Informacijski pooblaščenec) — dco-sanc-3111