Croatia. ePrivacy / marketing. Act

ZEKElectronic Communications Act (Zakon o elektroničkim komunikacijama)

In force
Partly verifiedLow confidence. Narodne novine deep link, in-force date and cookie article number not verified.

§1Summary

Synopsis

Croatia's 2022 Electronic Communications Act carries the ePrivacy rules: informed consent for cookies and similar technologies, and opt-in for unsolicited electronic marketing.

Key themes
  • cookies/terminal equipment consent
  • direct marketing
  • soft opt-in
  • traffic and location data
Unique features

Moved to a strict prior consent model for cookies on adoption of the 2022 Act.

SaaS relevance

Any SaaS website, app or product that sets non-essential cookies/SDKs or sends marketing emails/SMS to users in this country needs prior consent (subject to exemptions) under this law, regardless of where the provider is based.

§2Obligations

Extraterritorial
Yes
Breach notification
Telecom providers: authority notification under Reg 611/2013; otherwise GDPR
DPO
No
Cross-border transfers
None
Maximum penalty
Administrative fines under ZEK; GDPR fines via AZOP

§3Dates

Key dates
  • Adopted
  • In force
  • NN 76/2022, replaced the 2008 ZEK and transposed the EECC

§4Text and authority

Text
Authority
Croatian Regulatory Authority for Network Industries (HAKOM); AZOP for personal data

§5Where it applies

Domestic law of
Croatia

§6Sources and verification

Sources consulted
Verification

Low confidence.

Partly verifiedLow confidence. Narodne novine deep link, in-force date and cookie article number not verified.