CroatiaConsumer Credit Act, Articles 24 and 30, Personalised Offers and Creditworthiness Assessment by Automated Processing
Zakon o potrošačkim kreditima, Narodne novine 86/2026, čl. 24 i 30
An AI sector rules rule binding private bodies.
- Obligation class
- Disclosure, Data subject rights
As of .
What it requires
- This Act takes effect on (Article 119), so the duties below do not bind before then.
- If you offer a consumer a personalised offer based on automated processing of personal data, tell the consumer so clearly and comprehensibly, in addition to your duties under Regulation (EU) 2016/679 (Article 24).
- If you are a creditor and your creditworthiness assessment involves automated processing of personal data, tell the consumer so in writing, and tell the consumer of the right to a human assessment (Article 30(1)).
- Give the consumer on request a clear and comprehensible explanation of the assessment, including the logic and risks of the automated processing and its significance and effects on the decision (Article 30(1), point 1).
- Let the consumer express a view, and give the consumer on request a review of the assessment and of the decision to grant credit (Article 30(1), points 2 and 3, and Article 30(2)).
- If you reject a credit application on the basis of the assessment, tell the consumer that the assessment rests on automated processing of personal data, and of the right to a human assessment and the procedure for contesting the decision (Article 30(3)).
What it makes you log
Logging duty
Articles 24 and 30 require notices and a review right and state no duty to keep logs or records.
- Kind
- None
- As of
What this law does
Article 24 of the Consumer Credit Act requires a creditor and a credit intermediary that offer a consumer a personalised offer based on automated processing of personal data to tell the consumer so clearly and comprehensibly, in addition to their duties under Regulation (EU) 2016/679. Article 30(1) requires a creditor whose creditworthiness assessment involves automated processing of personal data to inform the consumer of that in writing, and of the consumer's right to a human assessment.
Under that right the consumer may request and receive a clear explanation of the assessment, including the logic and risks of the automated processing and its significance and effects on the decision, express a view to the creditor, and request and receive a review of the assessment and of the decision to grant credit. Article 30(2) requires the creditor to enable the consumer to exercise those rights.
Under Article 30(3), a creditor that rejects a credit application on the basis of the assessment must inform the consumer that the assessment rests on automated processing of personal data, and of the right to a human assessment and the procedure for contesting the decision. Article 119 provides that the Act takes effect on , apart from Article 114(1) to (6) and Article 3(2), points 1 and 2, which take effect later. The Act was published in Narodne novine 86/2026 on .
When LexLint raises it
When your app profile says your app provides financial services or makes high-risk automated decisions.