On 22 July 2025, the Slovenian Information Commissioner adopted an opinion on the transmission of personal data within the Internal Market Information System (IMI) to competent authorities in EU Member States. It was highlighted that any such transfer must be based on an appropriate legal basis provided in EU legislation, including the IMI Regulation, or in national law, and carried out in accordance with sector-specific procedural rules. The opinion reiterated that IMI participants may process personal data only for the purposes set out in the Union acts listed in the Regulation’s Annex, must ensure confidentiality, and must respect the original purpose for which the data was provided. The Commissioner emphasised that it cannot determine the legality of a transfer in a specific case, as this responsibility rests solely with the personal data controller.
Original source