The Slovenian supervisory authority imposed a total fine of 4,850 EUR on a company (4,650 EUR) and a responsible person (200 EUR). The responsible person had operated a test environment that was accessible with a publicly available username and password. Real personal data, rather than test data, was processed in this environment.