Slovenia Recording Laws: All-Party Consent Rules and Penalties (2026)

Overview of Recording Laws in Slovenia

Slovenia treats the privacy of conversations as a near-absolute right. The country's legal framework builds on a constitutional guarantee, a criminal statute that dates to 2008 and was last amended in 2023, and layers of European data protection regulation that together create one of the stricter recording regimes in the European Union.

For anyone living in, traveling through, or doing business with Slovenia, the bottom line is straightforward: you cannot record a conversation without the knowledge and consent of every person involved. Violations carry criminal penalties, and separate data protection rules can stack additional fines on top.

Three bodies of law work together to produce this result. The Constitution of the Republic of Slovenia sets the foundation. The Criminal Code (Kazenski zakonik, KZ-1) defines specific offenses and penalties. And the Personal Data Protection Act (ZVOP-2), which took effect on January 26, 2023, implements the EU General Data Protection Regulation with Slovenia-specific provisions on surveillance, biometrics, and enforcement.

Constitutional Protections for Communication Privacy

The Slovenian Constitution anchors privacy protections in several articles that courts treat as fundamental rights.

Article 35 guarantees "the inviolability of the physical and mental integrity of every person and his privacy and personality rights." This provision extends to any form of surveillance or recording that intrudes on personal autonomy.

Article 37 states that "the privacy of correspondence and other means of communication shall be guaranteed." The only permitted exception requires a law that authorizes a court to suspend this protection for a set period, and only when necessary for criminal proceedings or national security.

Article 38 guarantees the protection of personal data, prohibiting any use of personal data that goes beyond the purpose for which it was originally collected.

Taken together, these three provisions mean that recording someone's conversation without their consent is not just a criminal offense but a violation of constitutional rights. Courts apply strict proportionality analysis when any law attempts to carve out exceptions, and they have repeatedly struck down measures that failed to meet that standard.

Criminal Code Article 137: The Core Recording Offense

The primary statute governing audio recording in Slovenia is Article 137 of the Criminal Code (KZ-1), titled "Neupraviceno prisluskovanje in zvocno snemanje" (Unauthorized Eavesdropping and Sound Recording).

This article contains four paragraphs that define the offense, penalties, and prosecution procedures.

Paragraph 1: Eavesdropping on Others' Conversations

Anyone who uses special devices to eavesdrop on a conversation or statement not intended for them, or who records it, commits a criminal offense. The same applies to anyone who transmits such a conversation to a third party, plays a recording for them, or otherwise enables them to learn its contents.

The penalty is a fine or imprisonment of up to one year.

This paragraph targets the classic wiretapping scenario: intercepting a conversation between other people without being a participant. It covers both real-time eavesdropping and the act of recording for later use.

Paragraph 2: Recording Your Own Conversations Without Consent

Anyone who records a confidential statement intended for them, without the other person's consent and with the intent to misuse it, also faces criminal liability. Transmitting, playing, or otherwise sharing that recording with a third party triggers the same penalties.

The penalty mirrors paragraph 1: a fine or imprisonment of up to one year.

This is the provision that makes Slovenia an all-party consent jurisdiction. Even if you are a direct participant in the conversation, recording it without the other person's knowledge and consent is a criminal offense when done with intent to misuse the recording.

Paragraph 3: Aggravated Offense for Public Officials

When a public official commits either of the above offenses by abusing their official position or authority, the penalty increases significantly.

The punishment is imprisonment from three months to five years.

This harsher penalty reflects the Slovenian legal system's view that government officials hold a position of trust. Police officers, prosecutors, judges, and other state employees who use their authority to conduct unauthorized recordings face much steeper consequences.

Paragraph 4: How Prosecution Works

Prosecution for paragraph 1 offenses (eavesdropping on others) begins "on a proposal," meaning the victim must file a criminal complaint to initiate proceedings. For paragraph 2 offenses (recording your own conversations without consent), prosecution proceeds by private prosecution, placing the burden on the victim to bring the case forward.

This distinction matters in practice. Eavesdropping cases involve a prosecutor after the complaint is filed. Secret recording cases require the victim to pursue the matter through the court system directly.

Article 138: Visual Recording Restrictions

Article 138 of the Criminal Code addresses unauthorized visual recording (Neupraviceno slikovno snemanje) and follows a similar structure.

Recording another person or their premises without consent, where doing so substantially violates their privacy, is punishable by a fine or imprisonment of up to one year. Public officials who commit this offense through abuse of their position face three months to five years.

The "substantially violates privacy" standard gives courts discretion. Filming someone on a busy public street may not meet the threshold, but recording them through a window at home almost certainly would.

Phone Recording Laws in Slovenia

Recording telephone calls in Slovenia falls under both the Criminal Code and the Electronic Communications Act (ZEKom-2), which replaced the earlier ZEKom-1 when it entered force on November 10, 2022.

The general rule under ZEKom-2 is that recording and storage of electronic communications without prior consent of all participants is prohibited. This prohibition applies to private individuals and businesses alike.

The Slovenian Information Commissioner (Informacijski pooblascenec) has issued guidance confirming that telephone recording without prior consent constitutes a criminal offense under the Criminal Code. The Commissioner has also noted that even notification of recording is insufficient on its own; all statutory conditions must be met simultaneously.

When Business Call Recording Is Permitted

A narrow exception exists for business communications. Companies may record calls to "provide evidence of market transactions or other business communication," but only when all of the following conditions are met:

• All parties receive advance notice before the recording begins
• The specific purpose of the recording is clearly disclosed
• The storage duration for the recording is defined and communicated
• A lawful basis under GDPR exists for the data processing

The Information Commissioner has emphasized that general "quality assurance" or "training purposes" do not, by themselves, constitute sufficient legal justification for recording calls. Businesses that rely on these vague rationales risk both criminal liability and GDPR enforcement actions.

In-Person Recording: What the Law Covers

Article 137 applies with equal force to in-person conversations. Using a hidden microphone, a smartphone voice recorder app, or any other device to capture a face-to-face discussion without the consent of all parties is a criminal offense.

The statute refers to "special devices" (posebne naprave) in paragraph 1, but courts have interpreted this broadly. A smartphone counts. A smartwatch with a microphone counts. Any device capable of capturing audio falls within the scope of the law.

For paragraph 2, which covers recording conversations you participate in, no special device is required by the text. The offense is triggered by recording a confidential statement without consent and with intent to misuse it.

The "Intent to Misuse" Question

Paragraph 2's requirement of intent to misuse (z namenom, da bi tako izjavo zlorabil) creates a narrower offense than paragraph 1. A participant who records a conversation for purely personal reference, with no plan to share or use it against the speaker, may have a defense.

However, this defense is difficult to sustain in practice. Courts look at the totality of circumstances, and sharing the recording with anyone, posting it online, or using it in legal proceedings can all demonstrate the required intent. The safest course is to obtain consent before pressing record.

Workplace Recording in Slovenia

Slovenian labor law imposes additional restrictions on recording in the workplace, layered on top of the Criminal Code provisions.

Employer Surveillance of Employees

The ZVOP-2 Act and GDPR together regulate employer monitoring. Video surveillance of areas where employees usually work is prohibited unless the employer can demonstrate it is absolutely necessary for safety, property protection, or another compelling reason.

Before installing any surveillance system, employers must:

• Consult with trade union representatives, the works council, or a workers' representative at least 30 days before implementation
• Provide written notice to all employees
• Post visible signage at distances that allow individuals to avoid monitored areas
• Conduct and document a legitimate interest assessment
• Define and disclose retention periods (maximum one year under ZVOP-2)

Certain areas are completely off-limits for surveillance regardless of justification: elevators, restrooms, changing rooms, hotel rooms, and any similar space where individuals reasonably expect a higher level of privacy.

Employee Recording of Workplace Conversations

Employees who secretly record conversations with colleagues or supervisors face the same criminal liability under Article 137. Slovenian law does not carve out a workplace exception.

The Slovenian government has explicitly addressed this point. In response to a 2021 public proposal asking whether citizens should be allowed to record public officials performing their duties, three ministries (Justice, Public Administration, and Interior) confirmed that recording without consent may violate both Article 137 (audio) and Article 138 (visual) of the Criminal Code.

Audio Surveillance in the Workplace

Audio recording of employees is treated even more restrictively than video surveillance. While ZVOP-2 contains specific provisions permitting CCTV under defined conditions, it provides no equivalent authorization for continuous audio monitoring in the workplace. Any employer who records workplace conversations without all-party consent faces both criminal prosecution and GDPR enforcement.

Recording in Public Spaces

Recording in public spaces occupies a gray area under Slovenian law. The constitutional right to privacy still applies, but expectations of privacy are lower in genuinely public settings.

Slovenian courts have developed a four-factor test for evaluating whether recording in a public space violates privacy:

1. The degree of intimacy of the invaded sphere of privacy
2. The characteristics of the public space under surveillance
3. Whether the cameras or recording devices were visible or disguised
4. The scope and degree of recording compared to its normal and expected purpose

Filming a busy street scene where no individual is singled out is generally permissible. Secretly recording a private conversation on a park bench, even though the setting is technically public, likely crosses the line.

Automatic license plate recognition systems are explicitly banned in public areas under ZVOP-2. Biometric surveillance systems in public spaces are similarly prohibited.

GDPR and Data Protection Enforcement

Slovenia's data protection framework adds a separate layer of liability that applies alongside the Criminal Code.

The GDPR, which has been directly applicable in Slovenia since May 2018, treats any audio or [video recording that captures identifiable individuals as personal data processing. This means recording requires a lawful basis under Article 6 of the GDPR, such as consent](/is-it-illegal-to-video-record-someone-without-their-consent), legitimate interest, or legal obligation.

The ZVOP-2, adopted on December 15, 2022 and effective January 26, 2023, fills gaps the GDPR left to member states. It was the last GDPR implementing act adopted in the entire European Union.

Penalties Under ZVOP-2 and GDPR

The penalty structure is substantial:

• Serious violations: Fines up to EUR 20 million or 4% of worldwide annual turnover, whichever is higher
• Administrative violations: Fines up to EUR 10 million or 2% of worldwide annual turnover
• CCTV-specific violations: EUR 4,000 to EUR 20,000 for medium and large companies; EUR 4,000 to EUR 10,000 for smaller entities
• Responsible individuals: EUR 200 to EUR 8,000 for serious violations; EUR 100 to EUR 5,000 for minor violations

The Information Commissioner serves as the enforcement authority for both GDPR and ZVOP-2 violations. The Commissioner has the power to conduct audits, issue corrective orders, and impose fines as an offense authority.

Law Enforcement and Wiretapping Exceptions

Slovenian law permits government surveillance only under tightly controlled conditions that mirror the constitutional requirements of Article 37.

Law enforcement agencies may intercept communications when:

• A court issues a specific order authorizing the surveillance
• The order is limited to a defined time period
• The surveillance is necessary for the investigation or conduct of criminal proceedings, or for national security
• Less intrusive means are insufficient to achieve the investigative purpose

These requirements reflect the constitutional principle that communication privacy can only be suspended by law, on the basis of a court decision, for a limited time, and when strictly necessary. Any evidence obtained outside these parameters risks exclusion from criminal proceedings.

Business Compliance Checklist

Organizations operating in Slovenia that need to record calls or conduct any form of surveillance should follow these steps:

1. Identify a lawful basis under GDPR Article 6 before recording anything
2. Obtain explicit consent from all parties before recording calls or conversations
3. Provide clear notice that explains the purpose, scope, and retention period of any recording
4. Document your legitimate interest assessment if relying on that basis instead of consent
5. Consult employee representatives at least 30 days before implementing workplace surveillance
6. Post visible signage for any CCTV installation, placed far enough away that people can avoid the monitored area
7. Set retention limits and do not exceed one year for CCTV footage or six months for public-area recordings
8. Appoint a Data Protection Officer if your organization conducts large-scale systematic monitoring
9. Register your processing activities and maintain records as required by GDPR Article 30
10. Report data breaches to the Information Commissioner within 72 hours

Penalties Summary Table

Here is a breakdown of the penalties that apply to illegal recording in Slovenia:

Offense	Law	Penalty
Eavesdropping on others' conversations	KZ-1 Art. 137(1)	Fine or up to 1 year imprisonment
Recording own conversation without consent (with intent to misuse)	KZ-1 Art. 137(2)	Fine or up to 1 year imprisonment
Either offense committed by a public official	KZ-1 Art. 137(3)	3 months to 5 years imprisonment
Unauthorized visual recording violating privacy	KZ-1 Art. 138(1)	Fine or up to 1 year imprisonment
Visual recording by public official abusing position	KZ-1 Art. 138(2)	3 months to 5 years imprisonment
Serious GDPR/ZVOP-2 data violation	GDPR Art. 83	Up to EUR 20 million or 4% of turnover
CCTV-specific violation	ZVOP-2	EUR 4,000 to EUR 20,000

Key Differences from Neighboring Countries

Slovenia's recording laws stand out in several ways compared to its neighbors:

• Austria similarly requires all-party consent under Section 120 of its Criminal Code, but Austria's enforcement mechanism differs
• Italy allows one-party consent for participants in a conversation, making it significantly more permissive
• Croatia requires all-party consent under its criminal code, closely mirroring Slovenia's approach
• Hungary follows a one-party consent model for private recordings

Businesses operating across borders in Central Europe should not assume that rules in one country apply in another. Slovenia's all-party requirement makes it one of the more restrictive jurisdictions in the region.