GDPR, IT and data protection in Slovakia
When you start operating in Slovakia, your data protection, IT and cybersecurity set-up must meet both EU rules and Slovak requirements. We help foreign companies adapt their group policies to Slovakia, negotiate IT contracts and deal with the Slovak Office for Personal Data Protection.
What we do
- GDPR audits and local documentation: records of processing, privacy notices, employee data
- Data processing agreements and international data transfers
- Data breach response and communication with the Slovak Office for Personal Data Protection
- Software development, licensing, SaaS and cloud agreements
- Cybersecurity obligations under Slovak law implementing the EU NIS2 Directive
- EU AI Act compliance for companies using AI tools in Slovakia
Frequently asked questions
Is our group GDPR documentation enough for Slovakia?
It is a good start, but Slovak law adds local rules, for example on employee data and monitoring at the workplace. We review your group documents and add only what Slovakia requires.
Who supervises data protection in Slovakia?
The Office for Personal Data Protection of the Slovak Republic. It handles complaints, carries out inspections and can impose fines under the GDPR.
Do we need an EU representative?
A company established outside the EU that offers goods or services to people in the EU, or monitors them, usually needs a representative in the EU under Article 27 GDPR. We advise whether this applies to you.
For a wider overview, see our data protection and cybersecurity and IP and IT law practices.