Sanction RGPD Croatian Data Protection Authority (azop) — Primary School : 2 k€ (2025)
- Autorité de contrôle
- Croatian Data Protection Authority (azop)
- Pays
- Croatie
- Entreprise / secteur
- Primary School
- Montant de l'amende
- 2 k€
- Date de la décision
- 1 septembre 2025
- Fondement juridique
- Art. 5, Art. 6
- Manquement
- Base légale insuffisante pour le traitement
Résumé des faits
The Croatian DPA has imposed a fine of EUR 2,000 on a primary school. In the context of an internal audit, the controller processed payroll data and forwarded it to City X, but failed to adequately remove personal data that was not necessary for processing. The controller only used a black marker, applying it insufficiently, and did not black out the names of the data subjects.