Following intrusion into personal records, criminal charges are also being filed against the Administration for Food Safety

The recent revelations concerning the data breach at Slovenia's Administration for Food Safety, Veterinary Sector and Plant Protection (UVHVVR) have sent shockwaves through the nation, prompting not only administrative scrutiny but also criminal investigations. As reported by Delo, the Information Commissioner's office has uncovered elements of criminal activity, leading to a formal complaint to law enforcement.

This incident, which saw unauthorized access to the personal data of nearly 900,000 residents—encompassing sensitive information about livestock, agricultural holdings, and subsidy recipients—has understandably caused significant public outcry and political fallout. The resignation of the administration's director, Vida Znoj, following the breach underscores the gravity with which this event is being treated.

“

In it, deficiencies and irregularities regarding the provision of personal data security in the administration's information system were identified, as well as irregularities related to informing individuals whose personal data was affected by the incident and exercising their rights.

From a Slovenian perspective, the protection of personal data, especially that linked to agricultural activities and state subsidies, is a matter of significant concern. Farmers and citizens alike rely on the integrity of these databases. The fact that the breach exposed details about farm registrations, subsidy beneficiaries, and even pet ownership highlights the pervasive nature of personal data collection and the vulnerability of these systems.

The Information Commissioner's findings of deficiencies in data security and notification procedures, coupled with the initiation of a criminal investigation, signal a robust response. However, the temporary halt of the misdemeanor procedure pending the outcome of the criminal investigation indicates the complex legal pathways involved. This case will be closely watched as it progresses, setting a precedent for accountability in data protection within Slovenia.

“

Due to inadequate provision of personal data security, a misdemeanor procedure was also initiated against responsible persons at the administration, but it was temporarily suspended.