What Croatia GDPR Implementation Act 2018 (NN 42/2018) - National Data Protection Implementation requires
Croatia's Zakon o provedbi Opće uredbe o zaštiti podataka (GDPR Implementation Act - Act on the Implementation of the General Data Protection Regulation), published in the Croatian Official Gazette (Narodne novine No. 42/2018) and entering into force on 25 May 2018, is Croatia's primary national legislation supplementing the EU General Data Protection Regulation (GDPR - Regulation (EU) 2016/679) in Croatia. The GDPR is directly applicable Croatian law by virtue of Croatia's EU membership (Croatia acceded to the EU on 1 July 2013). The GDPR Implementation Act provides national derogations, additions, and specifications that the GDPR permits EU member states to adopt and complements the prior Croatian Personal Data Protection Act (Zakon o zaštiti osobnih podataka, NN 103/2003, 118/2006, 41/2008, 130/2011, 106/2012). Croatia has been an EU member since 2013 and adopted the euro in January 2023, making it a growing economy with increasing digital sector development. Enforcement: the Agencija za zaštitu osobnih podataka (AZOP - Personal Data Protection Agency) is Croatia's independent data protection supervisory authority. The AZOP is Croatia's representative on the European Data Protection Board (EDPB) and participates in the EDPB's one-stop-shop mechanism for cross-border processing. Key Croatian national provisions: (1) Age of digital consent: Croatia has maintained the GDPR default of 16 years for information society services; data subjects under 16 require parental or guardian consent; (2) Employment - the Croatian Labour Act (Zakon o radu, NN 93/14, 127/17, 98/19, 151/22 and subsequent amendments) governs employment relationships and the processing of employee personal data alongside GDPR; employer monitoring requires advance employee notification; (3) Freedom of expression - exemptions for journalistic, academic, artistic, and literary processing aligned with GDPR Art. 85 and Croatian constitutional freedom of expression; (4) Health data - specific provisions for health data processing under Croatian health legislation supplementing GDPR Art. 9; (5) Public sector - Croatian public authorities are subject to the GDPR Implementation Act and Croatian administrative law; the Act on Right of Access to Information (Zakon o pravu na pristup informacijama, NN 25/13, 85/15, 69/22) governs public access to information and intersects with GDPR. Fines: GDPR administrative fines apply in Croatia - up to EUR 20 million or 4% of global annual turnover. The AZOP has imposed fines and issued enforcement decisions in employment, public sector, and digital services contexts.
Pillar: Data Protection & Privacy · Authority: Agencija za zaštitu osobnih podataka (AZOP - Personal Data Protection Agency, Croatia) · Version: 1.0.0 · Last updated:
Primary source: https://azop.hr/
SHA-256 integrity: 73947e0450e8ce0b86cdbc129aa42509e714350f3643daf52471db1b4507b1fd
Primary Citations — 6 traced to source
- Zakon o provedbi Opće uredbe o zaštiti podataka (GDPR Implementation Act, Croatia) - published Narodne novine No. 42/2018; in force 25 May 2018; supplements EU GDPR; national derogations: age of digital consent 16 years (GDPR default maintained); public authority processing requires statutory basis; research and statistics derogations; freedom of expression exemptions
- EU GDPR (Regulation (EU) 2016/679) - directly applicable in Croatia since EU accession 1 July 2013; fines up to EUR 20 million or 4% of global annual turnover; AZOP is Croatia's supervisory authority and EDPB member; 72-hour breach notification to AZOP under Art. 33; DPIA mandatory for high-risk processing under Art. 35; AZOP enforcement in employment, public sector, and digital services sectors
+ 4 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access
- Discovery (free): /api/v1/nodes/hr-gdpr-implementation-2018.json — 6-field metadata
- Vault (full node): /api/v1/vault/nodes/hr-gdpr-implementation-2018.json — full 13-key payload, $0.01 USDC (L402/Skyfire/Direct Base)
- Canonical URL: https://bidda.com/intelligence/hr-gdpr-implementation-2018
- Back to registry: Browse all 10,090 compliance nodes