Croatia’s Personal Data Protection Agency, AZOP, issued a 4.5 million euro fine to a telecommunications operator after the company’s personal data processing practices allegedly did not comply with the EU General Data Protection Regulation. AZOP found the “processor engaged by the controller for the purposes of the telephone sales service did not have even basic protection measures implemented, which the controller was obliged to check before the start of the processing of personal data in accordance with Article 28” of the GDPR.Â
Full story