CroatiaAct on the Implementation of the General Data Protection Regulation, anonymization of published Agency opinions and decisions
In force since .
A de-identification rule binding government bodies.
- Instrument type
- an act of a legislature
- Obligation class
- Governance
- Audit expectation
- none
What it requires
- If you are the Croatian Personal Data Protection Agency and you publish an opinion or decision on processing likely to put the rights and freedoms of individuals at high risk, anonymize or pseudonymize it first, and anonymize the information about minors where the opinion or decision concerns them (Article 18, paragraphs 2 and 3).
These lines are LexLint's reading of the law's text.
What record it asks for
Logging duty
Article 18 of the Act sets how the Agency publishes its opinions and decisions. It states no duty to create, keep or produce a log or record.
- Kind
- None
- As of
What this law does
Article 18(1) of the Act on the Implementation of the General Data Protection Regulation requires the Personal Data Protection Agency to publish on its website its decisions and opinions on kinds of processing likely to put the rights and freedoms of individuals at high risk. Article 18(2) of the Act requires those opinions and decisions to be anonymized or pseudonymized.
Under Article 18(3) of the Act, where the opinions and decisions concern minors, the technique of anonymizing the information about them is applied. The Act entered into force on .
When LexLint raises it
When your app profile says your app processes personal data or processes de-identified data.
Back to the example · Lint your app
Page updated .