SISBON users
SISBON members
SISBON members are entities referred to in the second (mandatory members) and fourth (voluntary members) paragraphs of Article 17 of the ZCKR-1, which provide data to SISBON. In SISBON, they report data on credit transactions concluded with borrowers, in the scope as specified in the first to third paragraphs of Article 8 of the ZCKR-1, and in the format and manner determined by the applicable SISBON Data Submission Manual. Members are controllers of personal data about their clients and are also users of personal data in terms of personal data protection regulations, specifically regarding the personal data of individuals for which they obtain data from SISBON based on the ZCKR-1.
Entities that must or may join SISBON must:
Submit an Application to join SISBON to Banka Slovenije,
Conclude a contract for the use of SISBON with Banka Slovenije,
Appoint a general SISBON administrator and their deputy,
Establish a SISBON test environment in accordance with the technical documentation of Banka Slovenije,
complete testing and fill out the UAT (User Acceptance Test) statement,
Conduct a review of suitability/readiness for inclusion in SISBON (the review procedure is described in the chapter below),
Initially report their data to SISBON in accordance with applicable legislation.
Other creditors
Other creditors are entities referred to in the fourth paragraph of Article 17 of the ZCKR-1 who do not opt for SISBON membership. They are required to report to SISBON data on credit operations concluded with borrowers, in the scope as specified in the fourth paragraph of Article 8 of the ZCKR-1, and in the format and manner determined by the applicable SISBON Data Submission Manual.
Other creditors can only access a specific – limited set of data from SISBON, namely:
name and surname of the borrower,
date and place of birth,
address,
tax number,
the identity of the credit provider,
amount of outstanding liabilities from a credit operation,
amount of liabilities with whose payment the consumer is in arrears,
amount of outstanding liabilities in connection with which judicial, administrative or tax enforcement is being executed at a bank,
amount of the outstanding liabilities for which a SISBON member has initiated recovery proceedings, including information on the restriction of use or disablement of a payment account for reason of recovery and on the removal of restrictions.
To access SISBON data other creditor must:
submit an application for inclusion in SISBON to Banka Slovenije and attach the licence for providing consumer credit services,
conclude a contract for the use of SISBON with Banka Slovenije,
appoint a general SISBON administrator and their deputy,
establish a SISBON test environment in accordance with the technical documentation of Banka Slovenije,
complete testing and fill out the UAT (User Acceptance Test) statement,
conduct a review of suitability/readiness for inclusion in SISBON (the review procedure is described in the chapter below),
initially report their data to SISBON in accordance with applicable legislation.
Procedure for the Assessment of a member or other creditors prior to entry into the SISBON production environment
In accordance with the Central Credit Register Act (ZCKR-1) and the SISBON Rules (secondary legislation), an assessment of adequate readiness for entry into the SISBON production environment is mandatory for all entities joining SISBON as members or o ther creditors. The assessment is carried out by Banka Slovenije.
Who is required to undergo the assessment?
Every entity that, in accordance with the law, is joining SISBON as a member or other creditors.
When is the assessment conducted?
Prior to entry into the SISBON production environment, that is, before the commencement of actual reporting and data exchange in the production system.
Why is the assessment necessary?
The assessment ensures that all technical requirements for membership in the information exchange system are met, as well as the security and organisational requirements stipulated by law and the SISBON Rules. The purpose of the assessment is to ensure the secure, proper, and lawful operation of the system, as well as the protection of personal and confidential data within SISBON.
What is the scope of the assessment?
The scope of the assessment is defined in the Self-Assessment Questionnaire and the Documentation Preparation Checklist for the Assessment.
What follows after the assessment is completed?
Upon completion of the assessment, a report is prepared on the adequate/inadequate readiness of the member or other creditor for entry into the SISBON production environment. In the case of inadequate readiness, a list of identified deficiencies is prepared, together with recommendations and deadlines for their remediation, which are communicated to the member or other creditor. After the deadline for implementing the recommendations has expired, a follow-up assessment is carried out to determine whether the deficiencies identified in the previous assessment have been addressed. Each assessment is charged to the member or other creditor in accordance with the applicable tariff of the information exchange system.
Obligation of members to submit an audit report
In accordance with the Central Credit Register Act (ZCKR-1), SISBON members are required to submit to Bank of Slovenia, at least every three years, an audit report by an independent auditor regarding compliance with technical requirements, security standards for access to the SISBON system, and the accuracy of data reporting to SISBON. General guidelines for the preparation of these reports are set out in the SISBON Rules (secondary legislation), while this section provides descriptive guidelines that further specify expectations regarding the content and supporting evidence for each area of the audit review. The descriptive guidelines are intended for SISBON members and auditors who prepare audit reports for members in accordance with the provisions of ZCKR-1 and the SISBON Rules.
Legal beneficiaries
State authorities and holders of public authority in the Republic of Slovenia, explicitly authorized by their sectoral legislation, can obtain data from SISBON. Currently, these are:
Courts of the Republic of Slovenia,
Financial Administration of the Republic of Slovenia.
To obtain SISBON data, other legal beneficiaries must:
conclude a contract or agreement with the SISBON controller,
appoint a person authorized to obtain SISBON data and ensure their qualified digital certificate.
Access to SISBON Urad web application
Contact:
For help please send any questions to [email protected].