Makes public services decisions, in Slovenia

Regulation (EU) 2016/679, Arts. 13(2)(f), 14(2)(g), 15(1)(h) and 22 · Read the law's page

• Give a person in Slovenia a path to obtain human intervention, express their view, and contest a decision made solely by automated processing that produces a legal or similarly significant effect on them.
• Do not subject a person in Slovenia to a decision based solely on automated processing, including profiling, that produces legal effects concerning them or similarly significantly affects them, unless the decision is necessary for entering into or performing a contract with them, is authorised by Union or Member State law that also lays down suitable measures to safeguard their rights, or rests on their explicit consent, under GDPR Article 22(1) and (2).
• Do not base a solely automated decision with legal or similarly significant effects on a person in Slovenia on the special categories of personal data in GDPR Article 9(1), unless they gave explicit consent or the processing is necessary for reasons of substantial public interest on the basis of proportionate Union or Member State law, and suitable measures to safeguard their rights are in place, under GDPR Article 22(4).
• If you make solely automated decisions about a person in Slovenia of the kind GDPR Article 22(1) and (4) describe, including profiling, tell them so and give them meaningful information about the logic involved and the significance and envisaged consequences for them: when you collect their data, within the Article 14(3) period where you obtained it from someone else, and in answering their access request, under GDPR Articles 13(2)(f), 14(2)(g) and 15(1)(h).

Regulation (EU) 2024/1689, OJ L 2024/1689, 12 July 2024

• Do not use an AI system for social scoring.
• Do not use real-time remote biometric identification in publicly accessible spaces.
• Tell a person when they are interacting with an AI chatbot.
• Disclose that content is AI-generated synthetic media when a person is exposed to it.

Zakon o izvajanju uredbe (EU) o določitvi harmoniziranih pravil o umetni inteligenci (ZIUDHPUI), Uradni list RS No. 85/2025 (implementing Regulation (EU) 2024/1689) · Read the law's page

• If you provide a high-risk AI system used in critical infrastructure (Annex III point 2), or are its authorised representative, submit the Annex VIII Section A registration data to AKOS, which keeps Slovenia's register of those systems (Article 18).

Zakon o odgovornosti za proizvode z napako · Read the law's page

• If you develop or make software, have it developed or made, or present yourself as its manufacturer, you answer as the manufacturer; free and open-source software developed or supplied outside a commercial activity is not a product (draft Arts. 5(1) point 3 and 6(1)).
• Keep supplying the software updates and upgrades needed to keep the product safe while the product is under your control; where you kept control of the product, you cannot rely on the Article 10(1) point 2 excuse (that the defect probably did not exist when you placed the product on the market) for a defect that results from software, an update or upgrade, a missing safety update, a connected service or a substantial modification (draft Arts. 9(2) and 10(2)).
• Judge safety against all the circumstances, including cybersecurity requirements, what the product can go on to learn or acquire after it is placed on the market, a recall, and the effect of other products used with it (draft Art. 8(2)).
• Keep records you could produce: on a claimant's plausible claim the court orders you to disclose the relevant data and documents available to you, and failing to do so presumes the product defective (draft Arts. 18(1) and 19(1) point 1).
• Meet the mandatory safety requirements that protect against the harm suffered: a product that does not meet them is presumed defective (draft Art. 19(1) point 2).
• If you are a manufacturer outside the EU, your importer, your authorized representative or your fulfilment service provider answers for the product in your place; a distributor or online platform answers too if no such person can be identified and it does not name one within one month of the injured person's request (draft Arts. 11 and 12).
• If you substantially modify a product without the manufacturer's consent and then make it available on the market or put it into use, you answer as the manufacturer of the modified product (draft Art. 6(2) and (3)).
• Do not rely on a contract term to limit or exclude your liability to an injured person: a term departing from the Act's rules on liability to the injured person's detriment is null (draft Art. 16).
• Be ready to prove a draft Article 10(1) excuse: that you did not place the product on the market or put it into use, that the defect probably did not exist then, that it results from complying with legal requirements, that the objective state of scientific and technical knowledge did not allow it to be discovered, or, for a component maker or a person who substantially modified the product, the component and modification excuses (draft Art. 10(1)).
• Keep the claim periods in view: three years from the day the injured person learned or should have learned of the defect, the damage and who caused it; ten years from placing the defective product on the market or putting it into use; 25 years for latent personal injury (draft Art. 15).