Primary School – €2,000 Fine (Croatia, 2025)

€2,000Agencija za zaštitu osobnih podataka1 September 2025Croatia
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

A primary school was fined €2,000 for improperly handling payroll data during an audit. They failed to adequately redact personal information before sharing it with the city. This case serves as a reminder for organizations to handle personal data carefully.

What happened

The primary school was fined for not properly removing unnecessary personal data when sharing payroll information.

Who was affected

Employees whose payroll data was inadequately protected during the audit process.

What the authority found

The Croatian Data Protection Authority found that the school did not comply with data protection rules regarding the processing of personal data.

Why this matters

This case highlights the importance of proper data handling practices in all organizations. Schools and businesses should ensure they are compliant with data protection regulations when sharing information.

GDPR Articles Cited

AI-verified

Art. 5(GDPR)
Art. 6(GDPR)
View original scraped data
Art. 5(GDPR)
Art. 6(GDPR)

Original data from scraper before AI verification against source document.

Source verified 8 April 2026
verified correct
Full Legal Summary
Detailed

The Croatian DPA has imposed a fine of EUR 2,000 on a primary school. In the context of an internal audit, the controller processed payroll data and forwarded it to City X, but failed to adequately remove personal data that was not necessary for processing. The controller only used a black marker, applying it insufficiently, and did not black out the names of the data subjects.

Related Enforcement Actions (0)

No other enforcement actions found for Primary School in HR

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

1 September 2025

Authority

Agencija za zaštitu osobnih podataka

Fine Amount

€2,000

Enforcement Tracker ID

ETid-3072

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Primary School - Croatia (2025). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: