Slovenia

AI behavior law: bot and agent disclosure, crawler and training-data rules, automated-agent transactions, and algorithmic decision-making.

0
Instruments
0
Enacted
0
Proposed / in discussion
medium
Confidence

Summary

Slovenia presents moderate risk for web crawlers. The Criminal Code (Kazenski zakonik, KZ-1) Art. 221 criminalises attacks on information systems, including unauthorised access or intrusion; the provision targets deliberate interference with secured systems, not routine crawling of public pages. Slovenia transposed the DSM Directive (2019/790) via amendments to the Copyright and Related Rights Act (Zakon o avtorski in sorodnih pravicah, ZASP-H) enacted 29 September 2022 and in force 22 October 2022. The Slovenian implementation is notable for imposing a 72-hour deadline on rightholders to remove technological protection measures that hinder legitimate TDM use (pro-user provision). Commercial TDM on public content is permitted subject to a machine-readable opt-out (e.g. robots.txt); contractual override of the TDM exception is prohibited. The full EU sui generis database right applies. GDPR is enforced by the IP-RS (Informacijski pooblaščenec). No scraping-specific statute or published case law exists. The EU AI Act Art. 53 opt-out obligation is binding from August 2025 for GPAI providers.

Automated-access legality

Carried forward from the crawler-law index. Governs whether automated clients may access public websites in this jurisdiction.

DimensionValue
Authorization testsecurity mechanism bypass
Public-page carve-outyes
Terms-of-service browsewrap enforceablenotice dependent
Terms-of-service clickwrap enforceableyes
Copyright exception modeltdm dual track
Text and data mining — commercial statuswith optout
Text and data mining — opt-out mechanismrobots txt
robots.txt legal weightevidentiary
AI training-specific lawbinding
Privacy regimeGDPR
Trespass to chattelsnot recognized

Last reviewed: 2026-05-23. Confidence: medium. Fast-moving area — verify before relying. Not legal advice.