Provides telecom services, in Slovenia

Uredba o ukrepih za končne uporabnike invalide, Uradni list RS, št. 38/14 in 130/22 – ZEKom-2, 1. do 9. in 11. člen · Read the law's page

• If AKOS has designated you as a universal service provider, treat as a priority the request of an end user with a disability for connection at a fixed location, give that end user a 50 percent discount on the connection, and deal with and clear faults on that end user's access line as a priority and free of charge (Decree, Art. 3).
• Make your general terms for publicly available telephone services at a fixed location, and the price list, available in audio and video form or in an electronic form that allows conversion into a form the end user with a disability can perceive (Decree, Art. 4(1)).
• Give a subscriber with a disability a 50 percent discount on the monthly subscription, and let a blind or partially sighted subscriber learn the amount of the bill by voice messages or in a convertible electronic form (Decree, Art. 4(2) and (3)).
• Let an end user with a disability buy at acquisition value, or rent at a price based on it, terminal equipment adapted to that end user's needs with the features Article 5(1) lists, among them screen reading and connection to a hearing aid (Decree, Art. 5).
• Make the universal directory available on a special number by voice, free of charge and with help in connecting calls, to blind or partially sighted end users, and as written text to deaf or hard of hearing end users (Decree, Arts. 6 and 7).
• Make at least 20 percent of public payphones or other public voice telephony access points in each trunk-code area accessible by wheelchair, mark key 5 for touch with the keys in the order of SIST ISO/IEC 9995-4, and publish a yearly updated list of their locations in audio or convertible electronic form at your points of sale and on websites designed in line with international web accessibility recommendations (Decree, Art. 8).
• Let a deaf or hard of hearing end user with a disability make emergency calls in sign languages and other forms of non-spoken language and, in any case, at least by sending written text (Decree, Art. 9).
• Carry out the measures for end users with disabilities regularly, without disruption and permanently (AKOS General Act on the quality of universal service, Art. 6).
• The Decree applies under Article 321(2) of the ZEKom-2 until regulations made on the basis of the ZEKom-2 are issued, and its discounts reach only end users with disabilities who lack the means to meet minimum living needs (Decree, Art. 11).

ZEKom-2, 173. in 174. člen (posebne cenovne opcije za upravičence), Zakon o elektronskih komunikacijah, Uradni list RS, št. 130/22, 18/23 in 40/25 · Read the law's page

• If AKOS requires it by decision under Article 173(3), offer the price options or packages that differ from your normal commercial terms to the beneficiaries of Article 174(1), including recipients of the assistance and attendance allowance, persons with at least a 60 percent bodily impairment from loss of hearing or at least an 80 percent bodily impairment of another kind, and children with special needs (Arts. 173(3) and 174(1), points 2 to 4).
• Keep AKOS regularly informed of the details of the price options and packages you offer (Art. 173(5)).

ZEKom-2, 185. do 187. člen (dostopne pogodbene informacije), Zakon o elektronskih komunikacijah, Uradni list RS, št. 130/22, 18/23 in 40/25 · Read the law's page

• If you provide internet access services or publicly available interpersonal communications services, include in the information you give a consumer before the contract is concluded the details of products and services intended for end users with disabilities and how to obtain the latest information on them (Art. 186(2), point 14).
• On the request of an end user with a disability, give that end user the information that Article 186 requires before the contract is concluded in a form that gives access to it, including machine reading (Art. 186(6)).
• State in the contract summary you give the consumer the extent to which your products and services are designed for end users with disabilities (Art. 187(1), point 5).
• Apply these duties also when the contract is concluded with a microenterprise, a small company or a non-profit organisation, unless it has expressly waived them (Arts. 186(7) and 187(5)).

ZEKom-2, 197. člen (dostopnost objavljenih informacij), Zakon o elektronskih komunikacijah, Uradni list RS, št. 130/22, 18/23 in 40/25 · Read the law's page

• Give the information that AKOS's general act under Article 197(3) requires you to provide yourself, including the details of products and services designed specifically for end users with disabilities, in a way and form that gives an end user with a disability access to it, including machine reading (Art. 197(2), point 2(d), (3) and (4)).

ZEKom-2, 200. člen, tretji in osmi odstavek (komunikacije v sili za uporabnike invalide), Zakon o elektronskih komunikacijah, Uradni list RS, št. 130/22, 18/23 in 40/25 · Read the law's page

• If you provide publicly available number-based interpersonal communications services, let users with disabilities make emergency communication in spoken and sign languages and other forms of non-spoken language, in the manner and to the extent that is technically possible, and be ready to prove any claimed technical impossibility (Art. 200(3)).
• Inform your users of the existence and use of the emergency numbers and of the ways in which their accessibility is ensured, on your website and in a visible place in the directory, and provide those notices in a form that is accessible to end users with different forms of disability (Art. 200(8)).
• When your subscribers enter the network of another Member State, inform them by SMS of the existence and use of the single European emergency number 112 and of its accessibility features (Art. 200(8)).

Zakon o elektronskih komunikacijah (ZEKom-2), Uradni list RS, št. 130/2022, 227. člen · Read the law's page

• If you provide public communications services, notify the Agency for Communication Networks and Services (AKOS) without delay of a personal data security breach (ZEKom-2 Article 227, paragraph 1).
• Notify the affected subscriber or individual without undue delay where the breach is likely to harm their personal data and privacy, unless you have satisfactorily shown the agency that appropriate technical protection measures were applied to the data concerned (Article 227, paragraphs 2 and 3).
• In the notice, describe the breach, give contact points and recommend measures to mitigate its effects, and add the consequences of the breach and the measures you proposed or took in the notice to the agency (Article 227, paragraph 5).
• Keep a sufficient inventory of personal data breaches (Article 227, paragraph 7).

Splošni akt o določitvi informacij o kakovosti javnih komunikacijskih storitev, Uradni list RS, št. 32/23, izdan na podlagi 199. člena Zakona o elektronskih komunikacijah · Read the law's page

• If you provide access to public communications networks, internet access services or publicly available interpersonal communications services and control at least some network elements, directly or through a service level agreement, publish in one place, and update at least once a year, information on the measures that ensure equivalence in access for end users with disabilities (General Act, Art. 2).
• If you provide publicly available interpersonal communications services, publish at least the voice bandwidth, the properties of real-time text (a visually distinguishable display, a programmatically determinable direction, interoperability and responsiveness) and the properties of video transmission (resolution, frame rate and synchronisation) (General Act, Art. 4(1)).
• Publish whether you enable the measures listed in Annex 2 to the General Act (General Act, Art. 4(2)).
• Present the published data also in a way that is accessible to end users with disabilities, older people and persons with special needs, in line with ETSI EN 301 549 version 3.1.1 (General Act, Art. 5(2)).
• Make the published data easy to access, visible and understandable and found from your mobile application as well, with a link on the home page of your website (General Act, Art. 5(3)).
• Publish the data every year by 10 January for the whole of the previous year (General Act, Art. 5(4)).

Zakon o elektronskih komunikacijah (ZEKom-2), 115. in 116. člen, v besedilu iz 65. člena ZInfV-1 (Uradni list RS, št. 40/25) · Read the law's page

• If you are an operator under the Zakon o elektronskih komunikacijah (ZEKom-2), establish and maintain a documented information security management system (SUVI) and continuity management system (SUNP) in line with the information security law, and take appropriate, effective and proportionate technical, operational and organizational measures to protect the integrity, authenticity, confidentiality and availability of your network and information systems and to limit the effect of incidents on your customers (Article 115(1)).
• Treat the SUVI and SUNP as a business secret, review the emergency-communication part of the SUNP at least once a year, and obtain the prior approval of the competent bodies before adopting or changing it (Article 115(2) and (3)).
• If you operate a mobile communications network that you supply to critical infrastructure operators, essential service providers, government bodies or holders of key parts of the state security system, also observe the additional security requirements and restrictions of Article 116.

Zakon o informacijski varnosti (ZInfV-1), Uradni list RS, št. 40/25, čl. 20-22 · Read the law's page

• Article 62 defers only the adoption of the Article 21 and 22 risk-management measures, and does not mention Article 20. The Act entered into force on 19 June 2025: essential and important entities generally have eighteen months, to 19 December 2026, to adopt the measures, while an essential entity already designated as an essential-service operator and a state-administration body designated under the predecessor Zakon o informacijski varnosti, and an operator under the Zakon o elektronskih komunikacijah, have one year, to 19 June 2026.
• This binds you where you fall within Annex 1 or Annex 2's sector lists and, unless one of Article 6(2)'s no-threshold triggers applies, you have at least 50 employees and an annual turnover or balance-sheet total of at least EUR 10 million. A DNS service, TLD registry, cloud, data-centre, content-delivery-network, managed-service or managed-security-service provider, and an online marketplace, online search engine or social-networking-services platform, falls under Slovenian jurisdiction (Article 31(1)) only where its main establishment in the European Union is in Slovenia.
• Take technical, operational and organisational measures to secure the integrity, authenticity, confidentiality and availability of the network and information systems you use for your work or to provide your services, and to prevent or reduce the impact of an incident on the recipients of your services and on other services.
• Cover at minimum, on an all-hazards basis: management support for information and cybersecurity, personnel integrity checks before, during and after employment, basic cyber-hygiene practices and training, human-resources security and access-rights management, backup management, logging of events on your network and information systems, assigned responsibility for protecting the systems you run, a policy on cryptography (and on encryption where needed), traffic and communications management, and supply-chain security with minimum requirements for your key suppliers.
• Also cover physical and technical protection of the premises housing key systems, application-software security including vulnerability handling and disclosure, management and prevention of technical-vulnerability exploitation, malware protection and intrusion detection, and a policy on the cloud services you use; use multi-factor or continuous authentication where risk management needs it, and secure voice, video, text and emergency communications where suited to your activity.
• Have your responsible person, the individual who leads, supervises or manages the entity or a public-administration body's head, approve these measures and oversee their implementation, and complete cybersecurity risk-management training at least every four years.

Zakon o informacijski varnosti (ZInfV-1), Uradni list RS, št. 40/25, čl. 29-30 · Read the law's page

• This binds an essential or important entity within Priloga 1 or Priloga 2 on the same scope as this jurisdiction's companion risk-management row; Article 29(3) separately names a provider of an online marketplace, an online search engine or a social-networking-services platform, alongside a DNS, TLD, cloud, data-centre, content-delivery-network, managed-service or managed-security-service provider, for a variant significant-incident standard set in the Commission's NIS2 implementing acts.
• Treat an incident as significant where it has caused, or could cause, your organisation serious operational disruption or financial loss, or has affected, or could affect, another person by causing substantial material or non-material damage.
• Give your competent CSIRT group an early warning without delay, at latest within 24 hours of detecting a significant incident, stating whether it is suspected to result from an unlawful or malicious act and whether it may have a cross-border effect.
• Follow with a full notification without delay, at latest within 72 hours, updating the early warning with an initial assessment of the incident's severity and impact and any available threat indicators, then an interim report if the CSIRT group asks for one, and a final report at latest one month after the 72-hour notification, or a progress report and a final report within one month of resolution if the incident is still ongoing at that point.
• If you are a trust service provider, notify your competent CSIRT group of a significant incident affecting your services without delay, and at latest within 24 hours of detecting it, instead of waiting for the full notification (Article 30, paragraph 2).
• Without delay, inform the recipients of your services of a significant incident likely to adversely affect them, and communicate to a recipient potentially affected by a significant cyber threat the measures it can take in response.

ZDPSI, 9., 30. (1. in 9.), 35. in 43. (3.) člen (elektronske komunikacije), Zakon o dostopnosti do proizvodov in storitev za invalide, Uradni list RS, št. 14/23 in 14/26 · Read the law's page

• If you provide an electronic communications service (other than machine-to-machine transmission), including emergency communication, provide voice communication and real-time text (Art. 9(1), as amended by the ZDPSI-A in force since 25 February 2026); where video is available beside voice, provide total conversation (Art. 9(1)).
• Make emergency communication by voice and text (including real-time text) synchronised and, where video is available, synchronised as total conversation, and pass it to the most appropriate emergency communication centre (Art. 9(1)).
• Also meet the general accessibility conditions and the provider duties of Arts. 8 and 21 (see the services row), unless you are a microenterprise (Art. 4(2)).