The Slovenian Information Commissioner (IP) imposed a fine of EUR 71,474 on an employer following an inspection procedure, with an additional EUR 4,000 fine imposed on the responsible person. The employer had installed the software Spyrix Employee Monitoring on the work computers of several employees, systematically recording all activities over several months – including screenshots and audio recordings of private conversations and private email communications. Employees were not informed. The IP found that none of the conditions for lawful processing under Art. 6(1) GDPR were met, thereby violating the fundamental principle of lawfulness of data processing.