Commission urges Slovenia to fulfil its obligations under the GDPR

The European Commission urges Slovenia to meet its GDPR obligations, citing failures in implementing key requirements and empowering its Data Protection Authority. A formal notice was issued after Slovenia’s persistent delays in updating its data protection framework.

European Commission has decided to send a reasoned opinion to Slovenia for failing to implement important obligations under the General Data Protection Regulation (GDPR), as well as for not making it possible for its Data Protection Authority to use all the corrective powers under the GDPR. The Commission considers that Slovenia has failed to fulfil its obligations stemming from the GDPR due to its persistent failure to reform its pre-GDPR national data protection framework. On 9 February 2022, the Commission sent a letter of formal notice to Slovenia asking it to adapt its national data protection framework, including the rules on its Data Protection Authority, and to enable it to exercise effectively all the corrective powers provided under the GDPR.