# Legal Entity: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Slovenian Supervisory Authority (Informacijski pooblaščenec)
- Date: 2025-11-26
- Original: https://www.enforcementtracker.com/ETid-3009
- Canonical: https://overview.legal/posts/52363
- Topics: Employees, Controllers, Supervisory Authorities, Processing Agreement, Processing, Supervision, Data Controller

## Summary

The Slovenian DPA has imposed a fine of EUR 6,600 on a legal entity. The controller used GPS trackers to systematically and indiscriminately monitor its employees' activities without sufficient legal basis. The entity was fined EUR 6,000, and the person responsible was fined EUR 600.

## Full text

The Slovenian DPA has imposed a fine of EUR 6,600 on a legal entity. The controller used GPS trackers to systematically and indiscriminately monitor its employees' activities without sufficient legal basis. The entity was fined EUR 6,000, and the person responsible was fined EUR 600.

GDPR Articles: Art. 5 (1) a) GDPR, Art. 6 (1) GDPR
Industry: Employment

---
Generated by overview.legal · https://overview.legal/posts/52363 · 2026-08-22