Paris Charter on AI signed

To achieve the potential benefits and preventing and mitigating the risks of emerging technologies for people and the planet, AI development, deployment and governance must be in the public interest. Public interest manifests differently for different communities, countries, and contexts, it requires opportunities for public participation, and it must serve equity and equality. We acknowledge that the mission and vision of artificial intelligence in the public interest builds on and is strengthened by existing definitions and academic research, public sector approaches, and civil society effor

Primary legal sourceGenerative AI ·Data Privacy & ProtectionOfficial source · elysee.fr ↗

22 AUG 2025 · Law / Act

Slovenia adopts act implementing EU AI Act

Skoči na filtre seznama Filtriranje se bo izvedlo ob spremembi izbire filtra in ne zahteva dodatne potrditve.

Secondary evidenceData Privacy & Protection ·CybersecurityIssuing institution: Issuing authority not identified

21 AUG 2025 · Law / Act

Act implementing Regulation (EU) 2024/1689 of European Parliament on laying down harmonised rules on artificial intelligence

On 21 August 2025, the Government of the Republic of Slovenia adopted the Draft Act on the Implementation of Regulation (EU) 2024/1689 of the European Parliament on laying down harmonised rules on artificial intelligence (AI). The Act applies to providers, deployers and other operators of high-risk AI systems. The Act designates ministries and agencies as notifying authorities, and tasks the Agency for Communications Networks and Services with maintaining a public register of high-risk AI sys...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

24 JUL 2025 · Policy / Guidance

Information Commissioner guidance on validity of child consent for personal data processing in online prize draws (No. 07121-1/2025/922) (No. 07121-1/2025/922)

On 24 July 2025, the Slovenian Information Commissioner adopted an opinion clarifying that children under 15 cannot validly consent to the processing of personal data for online prize draws without parental approval. However, it was highlighted that children aged 15 and above may consent independently if the activity does not significantly impact their lives. The opinion applies to organisers of direct marketing and promotional prize games involving children’s data and highlights that consent...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

23 JUL 2025 · Other

Information Commissioner's opinion on the obligation to keep records of processing activities (No. 07121-1/2025/912)

On 23 July 2025, the Slovenian Information Commissioner issued an opinion on the records of processing activities under the General Data Protection Regulation and Slovenia's personal data protection Act. It was highlighted that companies and organisations with fewer than 250 employees are generally exempt. It was however, emphasised that the companies must still keep records if the processing poses risks to individuals’ rights and freedoms, is not occasional, or involves special categories of...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

23 JUL 2025 · Other

Information Commissioner's opinion on exercising the right to access personal data through an authorised representative, including obligations of the operator (No. 07120-1/2025/328)

On 23 July 2025, the Information Commissioner of Slovenia issued an opinion on access to personal data by proxy. It was highlighted that individuals may exercise this right directly, through a legal representative, or through an authorised representative. It was also specified that the General Data Protection Regulation (GDPR) and the Slovenian Personal Data Protection Act (ZVOP-2) do not regulate proxy requests in detail, so the General Administrative Procedure Act (ZUP) applies. Under the G...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

22 JUL 2025 · Other

Information Commissioner's opinion on the transmission of personal data within the Internal Market Information System (No. 07120-1/2025/326)

On 22 July 2025, the Slovenian Information Commissioner adopted an opinion on the transmission of personal data within the Internal Market Information System (IMI) to competent authorities in EU Member States. It was highlighted that any such transfer must be based on an appropriate legal basis provided in EU legislation, including the IMI Regulation, or in national law, and carried out in accordance with sector-specific procedural rules. The opinion reiterated that IMI participants may proce...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

22 JUL 2025 · Other

Information Commissioner's opinion on patient access and management of health record requests (No. 07121-1/2025/573)

On 22 July 2025, the Information Commissioner (IP) adopted an opinion on the obligations of personal physicians to inform patients about how personal data is recorded in health documentation and whether such patient inquiries must be stored. The opinion clarifies that patients have the right to access and obtain copies of their medical records, including electronic versions, but doctors are not required to explain in advance how data is entered or organised. Patient requests related to their ...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

11 OCT 2022 · Law / Act

Slovenia: Electronic Communications Act

On 10 November 2022, the Slovenian Electronic Communications Act (ZEKom-2) entered into force. The Act incorporates EU Directive 2018/1972 on the European Electronic Communications Code; Directive 2002/58/EC on privacy and electronic communications; Directive 2002/77/EC on competition in markets for electronic communication networks and services; and Directive 2014/61/EU on measures to reduce the costs of setting up high-speed electronic communications networks.

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

27 JUL 2022 · International Agreement

Memorandum of Understanding to promote cooperation in Information and Communications Technology

On 27 July 2022, Slovenia and Ukraine signed a Memorandum of Understanding (MoU) on cybersecurity. According to the MoU, the countries will strengthen collaboration in several cybersecurity areas, exchange information and share best practices for addressing cyber incidents. Furthermore, it was stated that the countries will work on legislative and judicial proposals relating to information and communications technology (ICT) and scientific projects.

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

10 APR 2022 · Other

Data protection investigation regarding GPS tracking

On 4 October 2022, the Slovenian Supervisory Authority issued a decision on a case regarding the use of GPS tracking by a data controller in several company vehicles after a series of thefts. The data controller had stated that GPS tracking did not constitute data processing and that there had not been any access to the personal data of employees using the vehicles. The authority determined that maintaining the safety of property may constitute a legitimate interest of the data controller, bu...

Official materialNational StrategyOfficial source · edpb.europa.eu ↗

National Strategy

Digitalna Slovenija 2030 (Digital Slovenia 2030) - National strategy for digital transformation

AI law in Slovenia: Digitalna Slovenija 2030 is the Republic of Slovenia’s national, cross-sectoral strategy for digital transformation adopted on 23 March 2023. It sets vision, targets and indicators across six priority domains (gigabit infrastructure, digital skills & inclusion, digital transformation of the economy, path to Society 5.0, digital public services, and cybersecurity) and aligns national goals with the EU Digital Decade....

Official materialNational StrategyOfficial source · digital-compass.ec.europa.eu ↗

Law / Act

Zakon o izvajanju Uredbe (EU) o določitvi harmoniziranih pravil o umetni inteligenci / Act on the Implementation of the (EU) Regulation on Harmonised Rules on Artificial Intelligence (national implementing act)

AI law in Slovenia: This Act (ZIUDHPUI) designates the national authorities, enforcement and market‑surveillance framework, and supporting measures for implementing Regulation (EU) 2024/1689 (the EU AI Regulation) in Slovenia. It does not create new substantive obligations for AI systems beyond the EU Regulation, but prescribes which Slovenian bodies will perform notification, conformity, inspection, enforcement, and support (including sandboxes and public awareness) functions....

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

National Strategy

National Programme for the Promotion of the Development and Use of Artificial Intelligence in the Republic of Slovenia until 2025 (NpUI)

AI law in Slovenia: The NpUI (2021–2025) is Slovenia’s national strategic programme to stimulate research, development and deployment of artificial intelligence across public administration, industry and society. Adopted by the Government in May–June 2021, it defines ten strategic objectives, priority sectors, governance arrangements and implementation measures to 2025, and assigns coordination and monitoring responsibilities to the Ministry of Public Administration (now within the Ministry for Digital Transformation)....

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

National Strategy

Strategy for Digital Public Services 2030 (Strategija digitalnih javnih storitev 2030)

AI law in Slovenia: The Strategy for Digital Public Services 2030 sets Slovenia's national roadmap to deliver citizen- and business-centric digital public services by 2030. It establishes three headline targets (online availability of key services, 80% digital completion, and 80% digital identity use) and defines strategic objectives, institutional responsibilities and a biennially updated action plan to implement interoperable, secure and inclusive e-services across the public sector....

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified