# Legal Entity: Insufficient data processing agreement

- Type: Enforcement
- Source: Slovenian Supervisory Authority (Informacijski pooblaščenec)
- Date: 2025-07-25
- Original: https://www.enforcementtracker.com/ETid-3004
- Canonical: https://overview.legal/posts/52358
- Topics: Processors, Controllers, Processing Agreement, Data Processor, Processing, Supervisory Authorities, Personal Data, Data Controller, Supervision

## Summary

The Slovenian DPA has imposed a fine of EUR 5,810 on a legal entity. The controller employed a person authorised to perform clerical work. However, this person used a data processor to process personal data without a data processing agreement. The legal entity was fined €5,610, and the person responsible within the entity was fined €200.

## Full text

The Slovenian DPA has imposed a fine of EUR 5,810 on a legal entity. The controller employed a person authorised to perform clerical work. However, this person used a data processor to process personal data without a data processing agreement. The legal entity was fined €5,610, and the person responsible within the entity was fined €200.

GDPR Articles: Art. 28 (3) GDPR
Industry: Not assigned

---
Generated by overview.legal · https://overview.legal/posts/52358 · 2026-08-22