Offences relating to personal data
Pursuant to the Act No. 300/2005 Coll., the Criminal Code, a person that unlawfully gives an access or make public the personal data of other person that were processed in connection with an exercise of a public authority or with a business activity or employment, may be sentenced to up to 1 year in prison. In severe cases, they may be sentenced for up to 2 years in prison.
Administrative fines
The administrative fine for a controller or a processor may be imposed within two years after the Slovak Data Protection Authority became aware of the violation of the data protection obligation, but no later than five years after such violation happened (Article 104(3) of the Data Protection Act).
Fines for third parties
The Slovak Data Protection Authority may impose a fine up to EUR 2,000 to a person, who is not a controller or a processor, in case such a person does not comply with any type of request by the Slovak Data Protection Authority, in particular requests related to a control the Slovak Data Protection Authority carries out, in which the Slovak Data Protection Authority requires any type of activity of such person (Article 105(1) of the Data Protection Act).
