Legal Entity: Insufficient technical and organisational measures to ensure information security

€16,650 fine - Slovenian Supervisory Authority (Informacijski pooblaščenec)

€16,650 Fine

Legal Entity

SLOVENIA

Insufficient technical and organisational measures to ensure information security

Nov 21, 2025 Source

Content

The Slovenian DPA has imposed a fine of EUR 16,650 on a legal entity. The controller stored personal data on a publicly accessible web server without taking sufficient technical and organisational measures. The server could be accessed via a unique URL without additional safeguards, such as a password login. The entity was fined EUR 16,250, and the person responsible was fined EUR 400.

GDPR Articles: Art. 32 GDPR
Industry: Not assigned