Croatian Insurance Bureau – €101,000 Fine (Croatia, 2025)

€101,000Agencija za zaštitu osobnih podataka2 July 2025Croatia
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

The Croatian Insurance Bureau was fined €101,000 for a data leak affecting over a million vehicle owners. The company failed to implement proper security measures to protect personal data. This case highlights the need for organizations to prioritize data security to avoid significant penalties.

What happened

The Croatian Insurance Bureau leaked personal data of over a million vehicle owners due to inadequate security measures.

Who was affected

Over a million vehicle owners whose personal data was leaked by the insurance bureau.

What the authority found

The Croatian DPA ruled that the bureau did not implement sufficient technical and organizational measures to protect personal data, violating GDPR rules.

Why this matters

This case serves as a crucial reminder for organizations to enhance their data security practices. It shows that failing to protect personal information can lead to severe financial consequences.

GDPR Articles Cited

AI-verified

Art. 5(1)(e) GDPR
Art. 32(2) GDPR
View original scraped data
Art. 5(1) e) GDPR
Art. 32(2) GDPR
(4) GDPR

Original data from scraper before AI verification against source document.

Source verified 23 April 2026
articles corrected
national law identified
Full Legal Summary
Detailed

The Croatian DPA has imposed a fine of EUR 101,000 on the Croatian Insurance Bureau. The controller failed to implement sufficient technical and organisational measures to ensure data security, resulting in the leak of the personal data from over a million vehicle owners. In determining the amount of the fine, the DPA took into account, that according to local regulations, fines imposed on public entities must not jepordice the fined entity's performance.

Related Enforcement Actions (0)

No other enforcement actions found for Croatian Insurance Bureau in HR

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

2 July 2025

Authority

Agencija za zaštitu osobnih podataka

Fine Amount

€101,000

Enforcement Tracker ID

ETid-1234

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Croatian Insurance Bureau - Croatia (2025). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: