Cybersecurity Policy Report, Surveys on GDPR Compliance Being Sent to Croatian Organizations, (Jun 15, 2026)

By Tony Foley

The Croatian data protection agency (AZOP) today said it had started implementing its activities for 2026 regarding the coordinated enforcement framework (CEF) initiated by the European Data Protection Board (EDPB) earlier this year.

The EDPB CEF, launched in March, is focused on data controllers’ compliance with transparency and information requirements under the European Union’s General Data Protection Regulation (GDPR) (CPR, March 12). In its announcement, AZOP said its activities aimed to verify controller compliance specifically with the obligations imposed by articles 12-14 of the GDPR. The agency will provide a questionnaire to controllers containing both general questions on fulfilling these obligations and specific questions related to the processing of personal data in the context of the use of artificial intelligence (AI) systems. Controllers receiving the agency’s notification are invited to fill in the questionnaire via the EU survey platform.

AZOP added that it planned to reconduct research initiated based on the EDPB’s 2023 CEF on the topic of the appointment and role of data protection officers (DPOs) as provided in GDPR articles 37-39 to determine if progress had been made over the past three years. A separate questionnaire is available for organizations to fill in, and the results of the survey will be used solely for the purpose of developing new tailored guidelines for DPOs.

The deadline for responses to both questionnaires is July 15, and no extensions will be provided. All controllers receiving notification from AZOP are obligated to respond. The agency recommended that answers be provided by a controller’s DPO but added that another person could respond provided that they had the accurate information necessary to complete the questionnaire.

News: InternationalLegislation DataPrivacy GDPR