Illustrative legal professionals with Bratislava Castle in Bratislava
Country law guide · Slovakia

Data protection & privacy in Slovakia

Privacy governance, data-sharing arrangements, transfers and incident response.

Slovak personal-data work combines the GDPR with Act No. 18/2018 and relevant sector rules. The domestic statute should be read for its particular scope rather than used as a replacement for the European regulation. Controllers and processors need documentation that reflects actual processing, especially where employment, customer databases or international service providers create several overlapping obligations.

For a matter involving Slovakia, the preparation should match the local legal framework. Map the personal information, purposes, recipients and transfer destinations before selecting contractual terms or notices. Determine controller and processor responsibilities from actual activity. A privacy programme should connect legal bases with retention, security, individual-rights handling and incident response, with national rules and supervisory guidance checked for the specific processing.

Key laws & official sources

Personal Data Protection Act, No. 18/2018

Official Slov-Lex legislation record; consult the date-specific text and legally binding PDF.

Point to check

Check the operative Slovakia text, amendments, territorial scope and procedural dates. An English summary or older translation is not a substitute for the authoritative version governing the matter.

Practical next steps

  • Identify each processing purpose, legal basis and responsible organisation.
  • Prepare the original documents and a dated chronology of the relevant events.
  • Confirm the competent authority, local representation and any deadline before taking the next step.

Documents to prepare

  • Data-flow map and processing records
  • Privacy notices and vendor agreements
  • Security records and incident chronology
Illustrative legal professionals with Bratislava Castle in Bratislava
Illustrative professional scene: Bratislava Castle, Bratislava. Fictional people; not a Jurisiti office or team photograph.

How Jurisiti can help

Identify the people, processing activities and countries involved before selecting a legal framework. Territorial reach can extend beyond the place of incorporation. A privacy notice is only one element of compliance: retention, access controls, supplier responsibilities, lawful transfers and an effective response to requests or incidents must support it.

  • Data mapping and lawful-basis assessment
  • Processor agreements and international transfers
  • Individual rights, breaches and regulator engagement

Questions about your matter

How do I start a data protection & privacy enquiry in Slovakia?

Identify the jurisdiction, the people involved, any existing proceeding or deadline, and the result you need. A short chronology and the key documents help define the proposed engagement before local professional arrangements are confirmed.

Can a cross-border matter involve more than one legal system?

Yes. Slovakia may be one part of a wider matter involving another place of residence, contracting party, asset or forum. Applicable law, jurisdiction and enforcement should be assessed separately, using the relevant national and international rules.

Does this guide establish a lawyer-client relationship?

No. An enquiry or use of this guide does not establish an engagement. Conflicts, professional authority, scope, responsibilities and fees must be confirmed before work is undertaken.

Your next move

A European perspective.
A clear way forward.

Tell us where your matter begins and what you need to achieve.

Discuss your matter ↗
Jurisiti Europe

What can we help you find?

Explore country law guides and European legal frameworks.