At the end of November 2017, the Slovak Parliament adopted a new act on the protection of personal data, which is due to enter into force on May 25, 2018.

The new act substantially copies the new European legislation on personal data protection (in particular the regulation on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, the so-called General Data Protection Regulation – GDPR).

The new act introduces several significant changes compared to the legislation currently in force. For example, the new act:

– no longer considers the birth number to be personal data falling within a specific category of personal data;

– tightens the conditions for the data subject’s consent to the processing of personal data;

– no longer provides for the obligation (in certain cases) to draw up a safety project;

– no longer provides for the obligation to keep internal records of information systems or the obligation to notify information systems to the Office for Personal Data Protection.

There is a new obligation to report security incidents to the Office for Personal Data Protection.