- Enforcing jurisdiction
- Croatia · Geography does not establish applicable law.
- Confirmed applicable legislation
- No confirmed legal basis recorded.
- Privacy topics
Insurance company – Fine (Croatia, 2021)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
A Croatian insurance company was found to have violated privacy rules by not notifying people about video surveillance at its facility. The data protection authority discovered that the company failed to inform individuals that they were being recorded. This case highlights the importance of transparency in surveillance practices.
What happened
The insurance company did not provide notice of video surveillance at its business facility, which is required by law.
Who was affected
The individuals affected were customers and visitors to the insurance company's facility who were recorded without being informed.
What the authority found
The data protection authority ruled that the insurance company violated privacy laws by not notifying individuals about the surveillance.
Why this matters
This case serves as a reminder for businesses to be transparent about surveillance practices. Companies must inform people when they are being recorded to comply with privacy regulations.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 20 March 2026.
Processing notes: articles corrected, national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The DPA has ex officio, without prior notice, conducted a direct supervision over an insurance company based in Zagreb. Upon inspection of its business facility for carrying out technical inspections and vehicle registration and contracting insurance services, the DPA established that both the business facility and its external surface are under video surveillance. However, the DPA established that the insurance company has failed to provide notice of such surveillance, which is contrary to Art 27 (1) of the Law on the Implementation of GDPR. Namely, data controllers and processors are obliged to indicate that the object and its outer surface are under video surveillance, and such notice must be visible at the latest when entering the perimeter of the recording and must contain all the prescribed information. Due to the breach, the DPA imposed an administrative fine on the insurance company.
Related Enforcement Actions (0)
No other enforcement actions found for Insurance company in HR
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
5 July 2021
Authority
Agencija za zaštitu osobnih podataka
About this data
Cite as: Cookie Fines. Insurance company - Croatia (2021). Retrieved from cookiefines.eu
Last updated: