- Enforcing jurisdiction
- Croatia · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Security company (name N/A at the moment) – Complaint Upheld (Croatia, 2021)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
A security company was found to have inadequate security measures after an employee leaked video footage online. This case matters because it shows the risks of not protecting personal data properly.
What happened
An employee of the security company recorded and shared video footage, leading to a data breach.
Who was affected
The individual whose footage was shared publicly, resulting in personal harm.
What the authority found
The data protection authority determined that the security company did not take necessary steps to secure personal data.
Why this matters
This case serves as a reminder for companies to implement strong security measures to protect personal data, especially in industries dealing with sensitive information.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 19 March 2026.
Processing notes: articles corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
A data controller, who used the services of the security company, reported the breach of personal data to the DPA, arising after an employee of the company recorded the video surveillance footage with a smartphone and shared it with third parties. In consequence a recording was revealed ridicule in the public and the security company avoid doing anything to remove it from social networks and media. Furthermore, the processor has not prognosticated or implemented adequate technical security measures following the incident to prevent or minimize the risks. Insufficient technical and organisational measures were set to ensure data security, but the fact is that the basic activity of the company is the provision of physical and technical protection, which includes the use of video surveillance.
Outcome
Complaint Upheld
A data subject complaint that was upheld by the DPA.
Related Enforcement Actions (0)
No other enforcement actions found for Security company (name N/A at the moment) in HR
This is the only recorded action for this entity in this jurisdiction.
Details
Decision Date
22 February 2021
Authority
Agencija za zaštitu osobnih podataka
About this data
Cite as: Cookie Fines. Security company (name N/A at the moment) - Croatia (2021). Retrieved from cookiefines.eu
Last updated: