GDPR Fines

A public record of GDPR enforcement across Europe — compiled by INPLP members

Ministry of Interior of the Slovak Republic

Country
Slovakia
Fine
The Authority did not impose a measure to remedy the identified deficiencies
Date
2019-04-17
Sector
Central body of state administration for protecting the constitutional system, public order, security of persons and property and more
Articles
Article 5 section 1 letter a) GDPR

The Office for the Protection of Personal Data dealt with a complaint against the Ministry of the Interior of the Slovak Republic for an alleged violation of the legislation on the protection of personal data.

The Office for the Protection of Personal Data dealt with a complaint against the Ministry of the Interior of the Slovak Republic for an alleged violation of the legislation on the protection of personal data, which was to be committed by the publication of the decision of the Regional Court of Senica, which was made public by public notice. This decision was also published 15 days after its publication, and the personal data of the person concerned were processed without authorisation (without legal basis). The Ministry of the Interior of the Slovak Republic cooperated with the Office and remedied the deficiencies voluntarily; the Office did not consider it necessary to impose remedial measures on the controller. Service by public notice shall be effected by posting the document on the official notice board of the administrative body for a period of 15 days, as provided by law. At the same time, the administrative body is obliged to publish the document simultaneously in another customary manner, while the controller has chosen to publish it on the website as well. The Office is of the opinion that the publication of a decision containing the personal data of the data subject on the website of the controller after a period longer than that specified (15 days) constitutes a breach of Section 9(1). 1 of Law No 122/2013.

Additional information

Service by public notice is made by posting the document on the official board of the administrative body for a period of 15 days stipulated by law. At the same time, the administrative body is obliged to publish the document at the same time in another usual way, while the controller hase chosen to publish it also on the website The Office considers that the publication of a decision containing the personal data of the data subject on the controller's website after a period longer than the specified period (15 days) constitutes a breach of § 9 par. 1 of Act no. 122/2013.