ZVOP-2 Chapter 4 (Articles 81-84) and Article 80, Biometric and Genetic Data

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

What follows is LexLint's own research summary of this law, not legal advice.

In force since 26 January 2023.

A biometric privacy rule binding public and private bodies.

As of 24 August 2026.

What it requires

Treat biometric-data processing in Slovenia as prohibited by default under ZVOP-2 Article 81 unless another Slovenian law both authorizes it and sets its conditions of use; a bare General Data Protection Regulation (GDPR) Article 9(2) basis alone is not sufficient in this jurisdiction.
Do not deploy automated license-plate recognition or a biometric-recognition system on a public surface in Slovenia; ZVOP-2 Article 80 bans this outright, with fines up to EUR 30,000 under Article 105.

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

ZVOP-2 Part II Chapter 4, Processing of Personal Data Using Biometrics and Genetic Data, imposes a default prohibition rather than a bare General Data Protection Regulation (GDPR) Article 9 lawful-basis test, read verbatim: Article 81(1) states processing of biometric personal data contrary to this chapter's provisions is prohibited; Article 81(2) requires any other law authorizing biometric processing to itself set the conditions of use; Article 81(3) bars linking biometric-data collections with other collections, or enabling their GDPR Article 20 portability, except where another law provides otherwise.

Separately, in Chapter 3 (Video Surveillance), Article 80 bans, on public surfaces, automated license-plate-recognition systems and systems processing biometric personal data, backed by Article 105 fines of EUR 5,000 to 30,000. Article 80 is entirely a public-video-surveillance provision; it does not carry a collective-redress or representative-action mandate, contrary to commentary that describes one. No voiceprint-specific definition has been located; ZVOP-2's own Article 3 definitions section is not reproduced here.

When LexLint raises it

processes_biometrics
processes_voice
high_risk_decisions

Read the law

ip-rs.si, ZVOP-2 Arts. 80-84, 105 (verbatim)

Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.

Back to the example · Lint your app