🇸🇰Act No. 18/2018 Coll. on Personal Data Protection

← Back to laws in Slovakia

Act No. 18/2018 Coll. on Personal Data Protection

Slovakia applies this national law alongside the GDPR. The summary below concentrates on the national overlay so that the GDPR baseline is not duplicated.

How the national law fits with GDPR

The Act supplements the GDPR, contains rules for processing outside the GDPR and law-enforcement processing, and regulates the Slovak supervisory authority, national processing situations and enforcement.

National additions and variations

• Section 15 retains 16 as the age for consent-based information-society services and requires reasonable efforts to verify consent or authorisation by a legal representative below 16.
• Section 44 requires publication of the DPO contact details and communication of those details to the Slovak Office.
• Section 78 permits limited employment-contact disclosures necessary for work tasks, but disclosure must not violate the employee's respectability, dignity or security.
• Section 78 limits use of a generally applicable identifier to necessity, requires explicit consent where consent is the basis and generally prohibits publication unless the person published it.
• Sections 78 and 79 add rules for expression, third-party collection, research safeguards, international security standards and continuing confidentiality obligations.

Operational approach

First maintain the GDPR control set. Then document whether this country is in scope and apply the national controls to the affected people, systems and processing. Keep article-level evidence for child consent, employment, special-category or criminal data, research, electronic communications, identifiers, surveillance and any rights restriction relied upon.