Nord Europa Assembly Proposes Stricter Data Security Rules Than Meridian

The Nord Europa Regional Assembly passed a civic code on data security and privacy on Friday afternoon that establishes legal requirements more stringent than those in the federal framework. The vote was 47 to 19, with the governing coalition and the Green Path party voting in favour and the Nord-Slovak Bloc abstaining. The code takes effect on 1 September 2026 and applies to any business processing personal data within Nord Europa's borders.

The move marks an escalation in a long-standing friction between Bratislava-Nova and Meridian over regulatory authority. The federal government, through the Interior Ministry, has established baseline data-protection rules that apply across all four regions. Nord Europa's new code goes further: it requires explicit annual consent from individuals before their data can be used in algorithmic decision-making, mandates that data processors disclose the logic of their algorithms to regulators, and imposes fines of up to 500,000 florins for violations. The federal framework permits algorithmic use with opt-out consent and does not require algorithm disclosure.

Regional Assembly Speaker Sigrun Halvarsson, who sponsored the measure, defended it as a legitimate exercise of Nord Europa's constitutional authority over civic affairs. "The Federal Charter reserves to the regions the power to set standards for local governance," she said in remarks to the chamber. "Data security is not a federal monopoly. We are exercising our prerogative as a region to protect our citizens." The statement drew applause from the Green Path benches and silence from the governing coalition's own backbenchers, suggesting internal division on the question of federal deference.