Sanction RGPD Croatian Data Protection Authority (azop) — Information and Communication Company : 50 k€ (2025)
- Autorité de contrôle
- Croatian Data Protection Authority (azop)
- Pays
- Croatie
- Entreprise / secteur
- Information and Communication Company
- Montant de l'amende
- 50 k€
- Date de la décision
- 22 juillet 2025
- Fondement juridique
- Art. 32 (1) b), d), (2)
- Manquement
- Mesures techniques et organisationnelles insuffisantes
Résumé des faits
The Croatian DPA has imposed a fine of EUR 50,000 on an information communication company. The controller suffered a cyber attack due to insufficient technical and organisational measures to ensure information security. Following the incident, the company implemented these measures and cooperated adequately with the supervisory authority.