ARTICLE · 24 JANUARY 2023
Better Late Than Never: Slovenia Last EU Member State To Adopt GDPR Implementing Act
On 15 December 2022, the Slovenian Parliament finally adopted the Data Protection Act (Zakon o varstvu osebnih podatkov, ZVOP-2, "ZVOP-2"), a national law implementing the EU General Data Protection Regulation ("GDPR"). The act had been several years in the making, with the earliest draft released for public consultation back in 2017.
On 15December2022, the Slovenian Parliament finally adopted the
Data Protection Act (Zakon o varstvu osebnih podatkov,
ZVOP-2, "ZVOP-2"), a national law
implementing the EU General Data Protection Regulation
("GDPR"). The act had been several years
in the making, with the earliest draft released for public
consultation back in 2017.
Since the GDPR became directly applicable in 2018, the scope of
applicability of the legacy Data Protection Act from 2004
("ZVOP-1") was reduced to a handful of
topics, including CCTV and processing of biometric data. The
failure to update the national data protection legislation
following the enactment of the GDPR generated a fair share of
practical issues. Notably, these included uncertainty about the
possibility to impose fines for breaches of the GDPR. Initially,
the prevailing view had been that these breaches cannot be
sanctioned at all, whether by means of administrative penalties
under the GDPR or by fines set out in ZVOP-1,
We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.
The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.
View source
