The Slovenia Insurance Supervision Agency reported on a 1 April 2026 working meeting with Slovenia’s Information Commissioner focused on data protection issues in the insurance and pensions sectors and on coordination around emerging oversight topics, including the use of artificial intelligence. The Insurance Supervision Agency presented an overview of the Slovenian insurance market, current trends and observed supervisory concerns, and outlined how its supervisory procedures are conducted. It also described new competences arising from the EU Artificial Intelligence Act and the Act on the right of persons after surviving cancer and certain other diseases to equal access to insurance and credit products, and highlighted findings from consumer submissions and complaints alleging personal data protection breaches at insurers and pension companies. The Information Commissioner’s office set out key areas of focus and challenges for the sector, including lawful bases for processing personal data, information duties, data protection impact assessments (DPIAs), constraints on automated decision-making, and the need for appropriate technical and organisational security measures. Both institutions expressed interest in further cooperation in exercising their respective mandates and in strengthening joint activities, particularly through training and the exchange of good practices, including in relation to oversight of AI use.
Slovenia Insurance Supervision Agency 2026-04-14
Slovenia Insurance Supervision Agency and Information Commissioner move to deepen cooperation on data protection and AI oversight in insurance
The Slovenia Insurance Supervision Agency held a working meeting with Slovenia’s Information Commissioner on data protection in the insurance and pensions sectors and coordination on emerging oversight topics, including artificial intelligence. They discussed supervisory concerns, new competences under the EU Artificial Intelligence Act and national rules on equal access to insurance and credit, as well as key data protection issues such as lawful processing, data protection impact assessments and automated decision-making. Both authorities plan to deepen cooperation through training and exchange of good practices, including on AI oversight.