The Croatian Personal Data Protection Agency- AZOP, announced that it has received information about the leak involving personal data of more than one million vehicle owners.
The investigation discovered that 2,444,587 records of 1,195,052 individuals had been leaked from USB memory stick, containing their names, addresses, personal identification numbers (OIBs), social security numbers (JMBGs), birth dates, vehicle registrations, and other information about their vehicles and insurance policies, which marked the biggest GDPR breach so far in Croatia.
AZOP reported that it is conducting supervisory actions over all relevant entities that possess the data affected by the breach to determine who is responsible and how the personal data breach occurred, as well as all other relevant information.
Recently, the Croatian Personal Data Protection Agency has shown increased activity. In April, AZOP issued nine new fines for GDPR violations, totaling €51,000.
A common trend among all supervisory authorities is the gradual formation of specialized supervisory teams, which are better equipped and have clearer guidelines for oversight, so we can assume that this is just one of many cases that AZOP will investigate this year.
Stay tuned for more information as the details of the case become available.
