Sanction RGPD Croatian Data Protection Authority (azop) — Bank : 1,5 M€ (2025)
- Autorité de contrôle
- Croatian Data Protection Authority (azop)
- Pays
- Croatie
- Entreprise / secteur
- Bank
- Montant de l'amende
- 1,5 M€
- Date de la décision
- 18 décembre 2025
- Fondement juridique
- Art. 5(1) a), c), Art. 6 (1), Art 12, Art. 13, Art. 25 (2)
- Manquement
- Non-respect des principes de traitement
Résumé des faits
The Croatian DPA has imposed a fine of EUR 1,500,000 on a bank. The controller offers its customers mobile banking via an app developed by the controller. On Android and Huawei devices, the app collected data on every app installed on the device. This happened without sufficient legal basis and infringed the principle of data minimisation.