Court case Us I-755/2025-8 – Court Ruling (Croatia, 2025)

Court Ruling
Agencija za zaštitu osobnih podataka11 November 2025Croatia
final
Court Ruling

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

A Croatian data subject complained that a television broadcaster published personal information about him without proper legal grounds. This case is significant because it shows how personal data can be misused in media reporting. Companies should be cautious about how they handle and share personal information to avoid legal issues.

What happened

The data subject claimed that a broadcaster unlawfully published his personal information after his resignation.

Who was affected

The former management board member of Zagrebački holding was affected by the publication of his personal data.

What the authority found

The Croatian data protection authority maintained that the publication served a legitimate public interest and did not violate GDPR rules.

Why this matters

This case illustrates the balance between privacy and freedom of expression in media. Businesses should be aware of the legal implications of sharing personal information, especially in public contexts.

GDPR Articles Cited

AI-verified

Art. 5(GDPR)
Art. 17(GDPR)
Art. 6(1)(a) GDPR
Art. 6(1)(f) GDPR
Art. 85(GDPR)
View original scraped data
Art. 5(GDPR)
Art. 6(1)(a) GDPR
Art. 6(1)(f) GDPR
Art. 17(GDPR)
Art. 85(GDPR)

Original data from scraper before AI verification against source document.

National Law Articles

AI-identified

Article 10 European Convention on Human Rights
Article 2 Media Act
Article 3 Media Act
Article 7 Media Act
Article 8 European Convention on Human Rights
Decision AuthorityUSR
Reviewed AuthorityAZOP (Croatia)
Source verified 21 March 2026
national law identified
authority corrected
Full Legal Summary
Detailed

The data subject was a member of the management board of Zagrebački holding, a company owned by the City of Zagreb, from 3 September 2021 until 31 March 2023. A television broadcaster published several pieces, including a video on its YouTube channel, reporting on the data subject’s resignation. The publications mentioned his name, role, employer, salary, and information on the brand of his private car. The data subject filed a complaint with the Croatian Personal Data Protection Agency (AZOP), claiming that the publication constituted unlawful processing under the GDPR because the media lacked a valid legal basis under Article 6, the reporting was inaccurate and excessive, and it did not serve any genuine public interest. He latter further claimed during the lawsuit against AZOP's decision that the authority had incorrectly and incompletely established the facts, misapplied substantive law, and breached procedural rules. He emphasized that the published personal data was unrelated to transparency in public administration, that he was neither a public figure nor a political actor, and that any public interest ended once he left office on 31 March 2023. He invoked his right to erasure under Article 17 GDPR and sought removal of the content, annulment of AZOP’s decision, or alternatively, a remittal for a new procedure. AZOP contested the lawsuit in full, maintaining that it had acted in accordance with Article 34 of the Croatian GDPR Implementation Act and Article 77 GDPR. It argued that the publication fell within a justified public interest under Article 8 of the Croatian Media Act and that it had properly carried out a balancing test between privacy (Article 8 ECHR) and freedom of expression (Article 10 ECHR). According to AZOP, the reporting was necessary, proportionate, and not sensationalistic, and did not excessively intrude on the data subject’s privacy. It added that consent was not required because the processing relied on legitimate interest under Article

Outcome

Court Ruling

A ruling by a national court on a data-protection matter.

Related Cases (0)

No other cases found for Court case Us I-755/2025-8 in HR

This is the only recorded case for this entity in this jurisdiction.

Details

Ruling Date

11 November 2025

Authority

Agencija za zaštitu osobnih podataka

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Court case Us I-755/2025-8 - Croatia (2025). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: