Data Protection
Compliance with the GDPR and Slovenian law, processing agreements, impact assessments and proceedings before the Information Commissioner.
We help controllers and processors from a range of sectors bring their operations into line with the General Data Protection Regulation (GDPR) and the Slovenian Personal Data Protection Act (ZVOP-2). We carry out compliance reviews and prepare privacy policies, records of processing activities, processing agreements and internal rules.
We advise on data protection impact assessments, transfers of data to third countries, video surveillance, direct marketing, the processing of employee data and the introduction of new technologies, including artificial intelligence systems.
In the event of personal data breaches, we help assess notification obligations and assist in communicating with the supervisory authority and individuals. We represent clients in inspection and minor offence proceedings before the Information Commissioner and in disputes over infringements of individuals’ rights.