Enforcement · Slovenian Supervisory Authority (Informacijski pooblaščenec) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.
Legal Entity: Insufficient legal basis for data processing
The Slovenian DPA has imposed a fine of EUR 6,600 on a legal entity.
Full text
The Slovenian DPA has imposed a fine of EUR 6,600 on a legal entity. The controller used GPS trackers to systematically and indiscriminately monitor its employees' activities without sufficient legal basis. The entity was fined EUR 6,000, and the person responsible was fined EUR 600.
Industry: Employment
How it connects
Related across sources
C-362/14 Maximillian Schrems v Data Protection Commissioner C-362/14 (Schrems I) CJEU Oct 6, 2015 Privacy Shield Supervision IP Address
Guidelines 8/2022 identifying a controller or processor's lead supervisory authority Guidelines for identifying a controller or processor’s lead supervisory authority Guidelines ·EDPB Apr 17, 2023 Supervision Controllers Supervisory Authorities
Guidelines 2/2018 derogations of Article 49 under Regulation 2016/679 Guidelines on derogations of Article 49 Guidelines ·EDPB May 25, 2018 Privacy Shield Lawful Basis Legitimate Interest
Opinion 22/2023 Controller Binding Corporate Rules for employee data of the UPS Group ·Opinion ·EDPB Nov 16, 2023 International Transfer Codes of Conduct Controllers
Opinion 12/2025 ASML Group Adopted on — controller BCRs EDPB, Opinion 12/2025 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the ASML Group Adopted on, 2025. ·Opinion ·EDPB Jun 6, 2025 International Transfer Codes of Conduct Controllers