Croatia

Information and Communication Company

50,000 €

GDPR enforcement action by Croatian Data Protection Authority (azop) on 2025-07-22.

Rank · Sector

#15

of 218 in Not assigned

Rank · Croatia

#15

of 43

Rank · All fines

#747

of 3,050

Case details

Authority: Croatian Data Protection Authority (azop)
Date: 2025-07-22
Controller / Processor: Information and Communication Company
Sector: Not assigned
Quoted Articles: Art. 32 (1) b), d), (2) GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Croatian DPA has imposed a fine of EUR 50,000 on an information communication company. The controller suffered a cyber attack due to insufficient technical and organisational measures to ensure information security. Following the incident, the company implemented these measures and cooperated adequately with the supervisory authority.

Open original source Links to the regulator's original publication or another source.