AI for business · Regulation
Personal Data Protection Act
Supplements GDPR in Slovenia — with special rules on video surveillance, biometrics, monitoring at work and processing in the public sector.
In forceSLOData and privacyOfficial Gazette RS 163/2022
What it means for AI
AI on cameras (face recognition, behaviour analysis) and biometric attendance systems fall under strict ZVOP-2 rules — often they are simply not allowed. The Information Commissioner has published opinions on AI, e.g. on misleading use of AI systems and on accountability.
What you must do
- Video surveillance: purpose, notice, limited retention; no AI analysis beyond the stated purpose.
- Biometrics in the private sector only where strictly necessary and permitted by law.
- Monitoring employees: proportionate, announced in advance, with employee consultation.
Examples
A store wants AI cameras that detect “suspicious behaviour”
Needs a DPIA and a clear legal basis; biometric identification of customers is not allowed. Ask the Information Commissioner first.
Key dates
ZVOP-2 applies.
Who supervises
Information Commissioner of Slovenia.
Official sources
Related regulations
General information, not legal advice — consult a lawyer for borderline cases. Regulations reviewed on 29 Sep 2026.