Sanction RGPD Croatian Data Protection Authority (azop) — Croatian Insurance Bureau : 101 k€ (2025)
- Autorité de contrôle
- Croatian Data Protection Authority (azop)
- Pays
- Croatie
- Entreprise / secteur
- Croatian Insurance Bureau
- Montant de l'amende
- 101 k€
- Date de la décision
- 2 juillet 2025
- Fondement juridique
- Art. 5 (1) e), Art. 32 (2), (4)
- Manquement
- Mesures techniques et organisationnelles insuffisantes
Résumé des faits
The Croatian DPA has imposed a fine of EUR 101,000 on the Croatian Insurance Bureau. The controller failed to implement sufficient technical and organisational measures to ensure data security, resulting in the leak of the personal data from over a million vehicle owners. In determining the amount of the fine, the DPA took into account, that according to local regulations, fines imposed on public entities must not jepordice the fined entity's performance.