Skip to main content

    AI by country · Southern Europe

    AI in Slovenia: the rules, the readiness and where to start

    Last checked: 29 October 2026

    What should a company in Slovenia know before starting with AI?

    Slovenia passed a law in October 2025 that applies the EU AI Act and names who enforces it: AKOS for most AI uses, and the Information Commissioner for prohibited practices and some high-risk systems. Personal data falls under the GDPR and the Personal Data Protection Act (ZVOP-2), which has strict national rules on workplace cameras and biometrics. A company should map its AI uses to the right supervisor and check those national data rules before launch.

    At a glance

    Slovenia at a glance

    Key facts about Slovenia
    Data protection lawGDPR (applies since 25 May 2018) plus the Personal Data Protection Act (ZVOP-2), Uradni list RS 163/2022, in force since 26 January 2023
    RegulatorInformation Commissioner (Informacijski pooblaščenec) for personal data; AKOS as main AI Act authority
    AI policyAct implementing the EU AI Act (ZIUDHPUI), Uradni list RS 85/2025; National Strategy for AI until 2030, adopted 5 March 2026
    Time zoneCET, UTC+1 in winter and UTC+2 in summer
    CurrencyEUR (euro)
    Business languageSlovene; English common in business

    Why now

    Why Slovenia is worth watching

    Each point links to the document it comes from.

    • Eurostat data show 21.61% of Slovenian enterprises with 10 or more staff used at least one AI technology in 2025, up from 20.89% in 2024 and just above the EU figure of 19.95%.[7]

    • The National Assembly adopted the AI Act implementing law on 23 October 2025, and it was published in Uradni list RS 85/2025 on 6 November 2025.[3]

    • The Government adopted the National Strategy for AI until 2030 on 5 March 2026, with five goals including wider AI use in business and government, and asked for an action plan within nine months.[5]

    • The implementing law requires AKOS to set up AI regulatory sandboxes and a single help desk for SMEs and the public.[4]

    • The AI Act's Article 50 transparency duties began on 2 August 2026, and Annex III high-risk rules now start on 2 December 2027.[1]

    The rules

    The rules that matter for AI

    What each law or policy means when you build or buy an AI system.

    General Data Protection Regulation, Regulation (EU) 2016/679

    In force2016People have a right not to be subject to decisions based solely on automated processing with legal or similarly significant effects (Article 22). High-risk processing needs an impact assessment (Article 35), and breaches go to the Information Commissioner within 72 hours where feasible (Article 33). Fines can reach 20 million euros or 4% of worldwide turnover.[2]

    Personal Data Protection Act (ZVOP-2)

    In force2022Children can consent to online services on their own from age 15 (Article 8). Workplace cameras are allowed only where strictly necessary, after written notice and consultation with unions or worker representatives (Article 78). Private-sector biometrics need the supervisory authority's prior permission before processing starts (Article 83), which matters for face or voice recognition tools.[6]

    Act implementing the EU regulation on harmonised rules on AI (ZIUDHPUI)

    In force2025AKOS is the single point of contact and supervises Annex I high-risk systems, some Annex III systems and Article 50 transparency duties. The Information Commissioner supervises prohibited practices and certain Annex III systems, while the Bank of Slovenia, the Insurance Supervision Agency and the Market Inspectorate cover their sectors. The law adds no new AI obligations beyond the AI Act and sets up a National Council for Ethics in AI.[3]

    EU Artificial Intelligence Act, Regulation (EU) 2024/1689, as amended by the Digital Omnibus on AI

    Phased2024Prohibitions and AI literacy have applied since 2 February 2025, and general-purpose AI rules since 2 August 2025. High-risk rules apply from 2 December 2027 (Annex III) and 2 August 2028 (AI in Annex I products). AI Act fines reach 35 million euros or 7% of turnover for prohibited practices, with the lower cap for SMEs.[1]

    Where AI fits first

    Where AI fits first

    Manufacturing

    Visual inspection on production lines and predictive maintenance.

    AI that is a safety component of machinery falls under Annex I; in Slovenia AKOS supervises Annex I high-risk systems, and the rules apply from 2 August 2028.[4]

    Banking

    Summarising loan files and answering customer questions in Slovene.

    The Bank of Slovenia is the AI market surveillance authority for credit institutions under the implementing law.[4]

    Workplace and access systems

    Face recognition for building access or time recording.

    Under Article 83 of ZVOP-2, private-sector biometrics can start only after the supervisory authority permits it, and staff must be told in writing.[6]

    Public sector

    Searching documents and drafting replies to citizens.

    The Government says the implementing law requires public-sector AI systems to be published, for transparency.[4]

    Your first steps

    Your first steps

    1. List every AI system you use and mark which fall under the AI Act's prohibited, high-risk or Article 50 transparency categories.
    2. Work out whether AKOS, the Information Commissioner or a financial supervisor is responsible for each system.
    3. Add AI notices to chatbots and label AI-generated content now, since Article 50 already applies.
    4. Do not start any biometric or camera-based AI at work until you have checked Articles 78 and 83 of ZVOP-2 and obtained any permission needed.
    5. Give staff basic AI training so you can show the measures you took on AI literacy.
    6. Put a GDPR transfer mechanism, such as standard contractual clauses, in place before personal data leaves the EU.
    7. Ask the AKOS help desk about sandboxes if you are testing a new AI product.

    AI services for Slovenia

    AI consulting and development for teams in Slovenia

    We work remotely with companies in Slovenia, in your time zone, and keep your data under the rules described above.

    AI agents and automation

    Agents that finish multi-step work across your tools, with people approving what matters.
    Learn more

    Document Q&A (RAG)

    Answers from your own documents, with the source shown for every answer.
    Learn more

    AI governance and data protection

    Policies, review steps and audit trails that fit your local data law.
    Learn more

    Software and cloud engineering

    Web apps, integrations and cloud platforms built around your AI use case.
    Learn more

    How we work with you

    How we work with you

    We work remotely with clients worldwide, in the client's time zone. Slovenia is on UTC+1 in winter and UTC+2 in summer, and India is on UTC+5:30, a gap of 4.5 hours in winter and 3.5 hours in summer. Taking a 9:00 to 18:00 day in Ljubljana and 9:30 to 18:30 in India, the overlap is 5 hours in winter (09:00 to 14:00 Ljubljana time) and 6 hours in summer (09:00 to 15:00). India has no EU adequacy decision, so personal data we handle from India needs a GDPR transfer mechanism such as standard contractual clauses.

    Questions

    Common questions about AI in Slovenia

    Does Slovenia have its own AI law?

    Yes, the act implementing the EU AI Act (ZIUDHPUI), published in Uradni list RS 85/2025. It names the authorities and sets procedures but adds no new obligations for AI systems beyond the AI Act.

    Who supervises AI in Slovenia?

    AKOS is the main authority and single point of contact. The Information Commissioner handles prohibited practices and some high-risk systems, and the Bank of Slovenia, the Insurance Supervision Agency and the Market Inspectorate cover their sectors. The European Commission's list from September 2026 still marked AKOS's designation as pending, though the national law is in force.

    Were the AI Act deadlines delayed?

    Partly. The Digital Omnibus on AI moved high-risk rules to 2 December 2027 and 2 August 2028. Article 50 transparency duties still apply from 2 August 2026.

    Can we use face recognition for staff access?

    Only with care. ZVOP-2 requires the supervisory authority's permission before private-sector biometric processing starts, plus written notice to staff and prior consultation on proportionality.

    Complimentary tools

    Try these first

    Three complimentary tools from our AI Toolkit that suit a team starting out.

    AI readiness score

    Answer a few questions and see where your team stands, in about five minutes.
    Open the tool

    AI use case triage

    Test an idea against data, risk and effort before you spend on it.
    Open the tool

    AI project cost estimator

    Get a rough build and run cost range for a first AI project.
    Open the tool

    Read next

    Sources

    Sources

    Facts checked on 29 October 2026. Numbers in square brackets above match this list.
    1. [1] European Commission, AI Act Service Desk, 2026-10-29. Timeline for the implementation of the EU AI Act(ai-act-service-desk.ec.europa.eu)
      Full title and what we used it for

      Timeline for the implementation of the EU AI Act. Primary. Accessed on this date; reflects the Digital Omnibus on AI (Regulation (EU) 2026/1744). Fine caps were read on the Service Desk Article 99 page.

    2. [2] Boletín Oficial del Estado (copy of the Official Journal of the EU, L 119), 2016-05-04. Regulation (EU) 2016/679 (General Data Protection Regulation)(boe.es)
      Full title and what we used it for

      Regulation (EU) 2016/679 (General Data Protection Regulation). Primary GDPR text, read in the Spanish official copy because EUR-Lex could not be opened from our tools. Used for Articles 22, 33, 35 and 83.

    3. [3] Uradni list Republike Slovenije, 2025-11-06. Zakon o izvajanju uredbe (EU) o določitvi harmoniziranih pravil o umetn…(uradni-list.si)
      Full title and what we used it for

      Zakon o izvajanju uredbe (EU) o določitvi harmoniziranih pravil o umetni inteligenci (ZIUDHPUI). Primary. Used for the authorities in Articles 6, 7 and 10, sandboxes (Article 17), the ethics council (Article 23) and entry into force on the fifteenth day after publication. Adoption date of 23 October 2025 from the Gazette entry. We did not rely on our reading of its national fine tiers.

    4. [4] Ministrstvo za digitalno preobrazbo, 2025-10-24. Slovenija med vodilnimi pri uvajanju evropske uredbe o umetni inteligen…(gov.si)
      Full title and what we used it for

      Slovenija med vodilnimi pri uvajanju evropske uredbe o umetni inteligenci. Primary government news. Used for the list of authorities, AKOS's sandbox and help desk role, the ethics council, and publication of public-sector AI systems.

    5. [5] Government of the Republic of Slovenia, 2026-03-05. 193rd regular session of the Government of the Republic of Slovenia(gov.si)
      Full title and what we used it for

      193rd regular session of the Government of the Republic of Slovenia. Primary. Used for the adoption of the National Strategy for AI until 2030, its five goals and the nine-month action plan deadline.

    6. [6] Uradni list Republike Slovenije, 2022-12-27. Zakon o varstvu osebnih podatkov (ZVOP-2), Uradni list RS 163/2022(uradni-list.si)
      Full title and what we used it for

      Zakon o varstvu osebnih podatkov (ZVOP-2), Uradni list RS 163/2022. Primary. Used for Articles 8, 78, 83 and 127 (entry into force 30 days after publication, which gives 26 January 2023, also stated by Uradni list news). Original text; later amendments not checked.

    7. [7] Eurostat, 2026-06-15. Artificial intelligence by size class of enterprise (isoc_eb_ai)(ec.europa.eu)
      Full title and what we used it for

      Artificial intelligence by size class of enterprise (isoc_eb_ai). Primary dataset, read through the Eurostat API. Indicator E_AI_TANY, enterprises with 10 or more persons employed, excluding the financial sector.

    8. [8] European Commission, 2026-09-07. Market surveillance authorities under the AI Act(digital-strategy.ec.europa.eu)
      Full title and what we used it for

      Market surveillance authorities under the AI Act. Primary. Lists AKOS as Slovenia's single point of contact, marked as national designation pending final adoption, which does not match the national law in force; we report both.

    This is general information, not legal advice. Slovenia's implementing law is in force, but guidance, sandboxes and the 2030 action plan are still being set up. Check with a qualified Slovenian lawyer before you act. Facts checked on 29 October 2026.

    Other country guides

    Starting with AI in Slovenia?

    Talk to an engineer. The first call is free, and we start with a readiness assessment before any budget is committed.

    Talk to our team Get your AI score