IP (Slovenia) · Date not published
General opinion
No party: the regulator gave an opinion or guidance.
About: Special categories, Unlawful processing
- Regulator
- IP (Slovenia)
- Decided
- Date not published
- Country
- Slovenia
- Sector
- Not given
- Regulator’s reference
- 07121-1/2021/1039
- Fino case number
- ND/SI/007
What happened
The Slovenian DPA (IP) issued an opinion that employers cannot collect or process employee's COVID-19 test results or their health card number unless required to do so by sectoral regulation. Even where such regulations are in place, the employer must prove that their data collection practices comply with the principle of data minimization.
Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Special categories
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote ND/SI/007.