Insurance company – Fine (Croatia, 2021)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A Croatian insurance company was found to have video surveillance at its business location without informing people about it. This matters because businesses must clearly notify people when they are being recorded. The Croatian data protection authority fined the company for not providing this notice.
What happened
The insurance company had video surveillance in place without notifying people entering the premises.
Who was affected
Visitors and employees at the insurance company's business facility in Zagreb were affected by the lack of notice about video surveillance.
What the authority found
The Croatian data protection authority found the insurance company violated the law by not providing visible notice of video surveillance, as required by national law implementing GDPR.
Why this matters
This case highlights the importance of transparency in video surveillance. Businesses should ensure they have clear signs informing people about surveillance to comply with privacy laws.
GDPR Articles Cited
The DPA has ex officio, without prior notice, conducted a direct supervision over an insurance company based in Zagreb. Upon inspection of its business facility for carrying out technical inspections and vehicle registration and contracting insurance services, the DPA established that both the business facility and its external surface are under video surveillance. However, the DPA established that the insurance company has failed to provide notice of such surveillance, which is contrary to Art 27 (1) of the Law on the Implementation of GDPR. Namely, data controllers and processors are obliged to indicate that the object and its outer surface are under video surveillance, and such notice must be visible at the latest when entering the perimeter of the recording and must contain all the prescribed information. Due to the breach, the DPA imposed an administrative fine on the insurance company.
Related Enforcement Actions (0)
No other enforcement actions found for Insurance company in HR
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
5 July 2021
Authority
Agencija za zaštitu osobnih podataka
Enforcement Tracker ID
ETid-756
About this data
Cite as: Cookie Fines. Insurance company - Croatia (2021). Retrieved from cookiefines.eu
Last updated: