Slovenia: technology regulation at a glance

Framework: EU Markets in Crypto-Assets Regulation (MiCA, Reg. (EU) 2023/1114) applied directly, with national implementation via the Slovenian Law on the Implementation of the EU Regulation on Crypto-Asset Markets (ZIUTK, in force 23 Nov 2024). Competent authorities: Securities Market Agency (ATVP) for CASPs and asset-referenced tokens; Bank of Slovenia (Banka Slovenije) for e-money tokens; AML/CFT via ZPPDFT‑2 (as amended by ZPPDFT‑2B, March 2025); taxation under the new 2026 crypto-disposal tax law administered by the Financial Administration (FURS).

Crypto-assets are legal and comprehensively regulated in Slovenia under the directly applicable EU MiCA Regulation, fully in force since 30 December 2024 and operationalised nationally by the ZIUTK implementation law. ATVP licenses and supervises crypto-asset service providers and ART issuers, while the Bank of Slovenia supervises e-money token issuers; Slovenia adopted a short (six-month) MiCA transition window for previously-operating providers. From 1 January 2026, individual gains on the disposal of crypto-assets for fiat or goods/services are subject to a new 25% flat tax under dedicated legislation, alongside DAC8/CARF reporting obligations.

Framework: EU AI Act (Regulation (EU) 2024/1689), directly applicable; national implementing act ZIUDHPUI (Zakon o izvajanju Uredbe (EU) o določitvi harmoniziranih pravil o umetni inteligenci) in force from 21 November 2025; primary national competent authority: AKOS (Agency for Communication Networks and Services)

Slovenia is fully bound by the EU AI Act (Regulation (EU) 2024/1689), which entered into force on 1 August 2024 and is progressively applicable through 2026-2028. To give the EU Regulation domestic effect, Slovenia enacted ZIUDHPUI in November 2025, designating AKOS as the single point of contact, lead market surveillance authority, and regulatory-sandbox operator, with several sector-specific co-authorities. A National AI Programme 2030 was submitted for public consultation in late 2025 to replace the 2021-2025 strategy.

Framework: EU GDPR (Regulation 2016/679) + national Personal Data Protection Act ZVOP-2 (Official Gazette of the Republic of Slovenia No. 163/22, in force 26 January 2023); supervisory authority: Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec, IP-RS)

Slovenia is subject to the GDPR as an EU member state, supplemented since 26 January 2023 by ZVOP-2, the national implementing act that fills GDPR opening clauses on video surveillance, biometrics, traceability logs, and administrative-penalty procedures. Slovenia was the last EU member state to adopt its GDPR-implementing legislation, nearly five years after GDPR became directly applicable in May 2018. The independent Information Commissioner (IP-RS) is the sole national supervisory authority empowered to investigate complaints, conduct inspections, and impose fines.

Framework: Payment Services, Services for Issuing Electronic Money and Payment Systems Act (ZPlaSSIED), transposing EU PSD2 (Directive 2015/2366/EU) and EMD2 (Directive 2009/110/EC); competent authority: Banka Slovenije (Bank of Slovenia)

Slovenia has a fully operative licensing regime for payment institutions and e-money issuers under ZPlaSSIED, which transposes PSD2 and EMD2 into national law. Banka Slovenije grants authorisations, maintains a public supervised-entities register, and operates a Fintech Innovation Hub for regulatory guidance. Slovenia participates in mandatory SEPA SCT Inst instant payments (full send/receive obligation met by October 2025) and is preparing for the EU PSD3/PSR transition.

Framework: Zakon o tujcih (Foreigners Act) ZTuj-2I, as amended by ZTuj-2I (Amendment I) adopted 25 April 2025, in force 21 November 2025; administered by the Ministry of the Interior of the Republic of Slovenia

Slovenia introduced a dedicated temporary residence permit for digital nomads on 21 November 2025 via an amendment to its Foreigners Act (ZTuj-2I). The permit is available exclusively to non-EU/EEA nationals who work remotely for employers or clients based outside Slovenia, and is valid for up to one year (non-renewable, but re-applicable after a six-month gap). EU/EEA nationals are separately covered by EU free-movement rights and may register as self-employed or freelancers without additional permits.

Framework: EU Digital Services Act (Regulation (EU) 2022/2065, directly applicable); national implementation Act on the Implementation of the EU Regulation on the Single Market for Digital Services (in force 13 April 2024); supervised by AKOS (Agencija za komunikacijska omrežja in storitve) as Digital Services Coordinator

Slovenia applies the EU Digital Services Act as the primary online safety and platform-regulation framework, supplemented by a national implementing act that entered into force on 13 April 2024 designating AKOS as the Digital Services Coordinator with full supervisory and sanctioning powers. A new Media Act (ZMed-1), approved by government on 31 December 2024 and subsequently passed by parliament, extends national content obligations to influencers, mandates labelling of AI-generated media content, and strengthens hate-speech rules. Slovenia relies on the DSA's Article 28 framework for protection of minors online and has publicly backed an EU-wide mandatory age-verification regime.

Framework: Zakon o informacijski varnosti (ZInfV-1), in force 19 June 2025, transposing EU NIS2 Directive 2022/2555; competent authority: URSIV (Government Information Security Office); national CSIRT: SI-CERT

Slovenia enacted the Information Security Act (ZInfV-1), published in the Official Gazette on 4 June 2025 and in force from 19 June 2025, fully transposing the EU NIS2 Directive (2022/2555) and replacing the 2018 ZInfV. The law extends binding cybersecurity obligations to an estimated 6,000-8,000 entities across critical and important sectors, imposing risk management, personal management accountability, and tiered incident-reporting duties. Supervision and enforcement are vested in URSIV, while SI-CERT (hosted within ARNES) acts as the national CSIRT.

Framework: Companies Act (Zakon o gospodarskih družbah, ZGD-1); SPOT one-stop-shop portal (spot.gov.si) operated by AJPES (Agency of the Republic of Slovenia for Public Legal Records and Related Services); Investment Promotion Act (Zakon o spodbujanju investicij, ZSInv) for FDI screening

Slovenia permits 100% foreign ownership in most sectors with no local-partner requirement, and company registration via the SPOT e-government portal is free of charge and completed in 2-3 business days. The most common vehicle is the private limited company (d.o.o.), requiring a minimum share capital of €7,500. Non-EU nationals face additional pre-registration steps, obtaining a Slovenian tax number and a work/residence permit, but the overall process remains streamlined and digitised.