| | SLO | ENG | Cookies and privacy

Bigger font | Smaller font

Show document Help

Title:Implementation of the General Data Protection Regulation in Slovenian higher education
Authors:ID Tancer Verboten, Mojca (Author)
ID Pavli, Kristina (Author)
ID Dvojmoč, Miha (Author)
Files:.pdf RAZ_Tancer_Verboten_Mojca_2026.pdf (803,82 KB)
MD5: BBFD1B90B1E31DA994258815F33BE705
 
URL https://www.fvv.um.si/rv/arhiv/2026/2026-04-Tancer-Pavli-Dvojmoc-E.html
 
Language:English
Work type:Scientific work
Typology:1.01 - Original Scientific Article
Organization:FVV - Faculty of Criminal Justice and Security
Abstract:Purpose: The article examines differences and similarities in how teaching and non-teaching staff at three Slovenian public universities perceive the level of implementation of the “General Data Protection Regulation (GDPR)” ("Regulation (EU) 2016/679 of the European Parliament and of the Council ... and repealing Directive 95/46/EC (General Data Protection Regulation - GDPR)”, 2016) in Slovenian higher education. The analysis takes account of the adoption of the national data protection act (“Zakon o varstvu podatkov, (ZVOP-2)”, 2022) being delayed until late 2022, the disruptions brought by the coronavirus disease 2019 [COVID-19] pandemic, along with insights from the universities’ data protection officers [DPOs]. Design/Methods/Approach: In May 2022, a quantitative study using a questionnaire was administered to teaching and non-teaching staff at the University of Ljubljana, the University of Maribor, and the University of Primorska. The questionnaire covered key GDPR areas, with additional structured interviews being conducted with each university’s DPO. Findings: It was revealed that the pandemic and the legislative delay negatively impacted implementation of the GDPR. Significant differences were observed between groups of staff, notably on understanding of the legal bases, data breach procedures, and the allocation of responsibility while processing personal data. Research Limitations/Implications: The study refers to the higher education sector; still, the findings may also apply to other areas in the public and private sectors. The methodology could be extended to lower levels of the Slovenian education system (higher vocational, secondary, primary; also educational institutions), while similar studies performed abroad could use it to provide an international comparison. The results could also underpin more research concerning implementation of the GDPR in other public-sector organisations, and an evaluation on the level of the supervisory authority, which would permit a more comprehensive system level assessment of compliance. Practical implications: The study is the first to empirically investigate implementation of the GDPR in Slovenian higher education. The importance of raising awareness among key stakeholders to ensure lawful, effective and coherent implementation of the data protection rules in practice is shown. Concrete guidance is provided for improving/upgrading existing institutional practices and helping to develop a more consistent data protection culture within the sector. Originality/Value: The study stresses the urgent need to improve sector-specific guidance, clarify the legal bases, and raise awareness among stakeholders in higher education. The results may be seen as valuable input for shaping national policy and institutional practices and support the development of good GDPR-implementation practices in the broader European higher education context.
Keywords:data protection, GDPR, COVID-19, Slovenia, higher education
Publication status:Published
Publication version:Version of Record
Publication date:20.04.2026
Year of publishing:2026
Number of pages:str. 1-37
Numbering:Vol. 28
PID:20.500.12556/DKUM-97865 New window
UDC:342.738:378
ISSN on article:2232-2981
COBISS.SI-ID:275949059 New window
Publication date in DKUM:21.04.2026
Views:143
Downloads:13
Metadata:XML DC-XML DC-RDF
Categories:Misc.
:
Copy citation
  
Average score:(0 votes)
Your score:Voting is allowed only for logged in users.
Share:Bookmark and Share



Hover the mouse pointer over a document title to show the abstract or click on the title to get all document metadata.

Record is a part of a journal

Title:Varstvoslovje
Publisher:Univerza v Mariboru, Fakulteta za varnostne vede
ISSN:2232-2981
COBISS.SI-ID:255308544 New window

Secondary language

Language:Slovenian
Title:Implementacija splošne uredbe o varstvu podatkov v slovenskem visokem šolstvu
Abstract:Namen prispevka: Prispevek proučuje razlike in podobnosti v percepcijah pedagoškega in nepedagoškega osebja na treh slovenskih javnih univerzah glede stanja izvajanja Splošne uredbe o varstvu podatkov (»GDPR«, 2016) v slovenskem visokem šolstvu. Analiza upošteva zamudo pri sprejetju nacionalnega zakona o varstvu podatkov (»ZVOP-2«, 2022) do konca leta 2022, motnje, ki jih je povzročila pandemija koronavirusne bolezni 2019 (v nadaljevanju COVID-19), in ugotovitve pooblaščenih oseb za varstvo podatkov (v nadaljevanju DPO) na univerzah. Metode: Maja 2022 je bila izvedena kvantitativna študija z uporabo vprašalnika, ki je bil razdeljen pedagoškemu in nepedagoškemu osebju na Univerzi v Ljubljani, Univerzi v Mariboru in Univerzi na Primorskem. Raziskava je zajela ključna področja GDPR, dodatni strukturirani intervjuji pa so bili opravljeni z DPO vsake univerze. Ugotovitve: Ugotovitve kažejo, da sta pandemija in zakonska zamuda negativno vplivali na izvajanje GDPR. Opazne so bile znatne razlike med skupinami osebja, zlasti glede razumevanja pravnih podlag, postopkov ob kršitvi varstva podatkov in razporeditve odgovornosti pri obdelavi osebnih podatkov. Omejitve/uporabnost raziskave: Raziskava se osredotoča na področje visokega šolstva, vendar je njene ugotovitve mogoče prenesti tudi na druge dejavnosti javnega in zasebnega sektorja. Možna je razširitev na nižje ravni izobraževanja v Republiki Sloveniji (višješolske, srednješolske in osnovnošolske ustanove ter vzgojne zavode) ter primerjava s tujino ob izvedbi vsebinsko sorodnih raziskav. Rezultati predstavljajo tudi izhodišče za nadaljnje raziskave implementacije z vidika drugih javnih subjektov ter evalvacijo na ravni nadzornega organa, kar omogoča celovitejšo presojo skladnosti na sistemski ravni. Praktična uporabnost: Gre za prvo študijo o implementaciji GDPR na področju visokega šolstva v Republiki Sloveniji. Osveščanje interesnih skupin na področju ene izmed najpomembnejših evropskih zakonodaj zadnjih let je izjemnega pomena za nadaljnjo kakovostno implementacijo (in njeno nadgradnjo) z GDPR ter za učinkovito in zakonsko skladno delo na področju visokega šolstva. Interesne skupine dobijo konkretne informacije za morebitne popravke ali nadgradnjo svojih obstoječih praks na področju varstva osebnih podatkov za dosego skladnosti z GDPR. Izvirnost/pomembnost prispevka: Študija poudarja nujno potrebo po izboljšanju sektorskih smernic, pojasnitvi pravnih podlag in ozaveščanju zainteresiranih strani v visokem šolstvu. Rezultati ponujajo dragocene informacije za oblikovanje nacionalne politike in institucionalnih praks ter podpirajo razvoj dobrih praks za izvajanje GDPR v širšem evropskem kontekstu visokega šolstva.
Keywords:varstvo podatkov, Slovenija, visoko šolstvo


Collection

This document is a part of these collections:
  1. Varstvoslovje

Comments

Leave comment

You must log in to leave a comment.

Comments (0)
0 - 0 / 0
 
There are no comments!

Back
Logos of partners University of Maribor University of Ljubljana University of Primorska University of Nova Gorica