Several Croatian regulatory authorities, including the Agency for Personal Data Protection (AZOP), met on July 6, 2026, for their second annual meeting to discuss the impact of global instability and cybersecurity on their activities.

The director of AZOP reported an increase of over 200% in incident notifications in the first half of 2026 compared to the same period in 2025, a trend observed throughout the European Union. He reminded that it is the responsibility of each controller to assess risks and implement appropriate technical and organizational measures to ensure data security, in accordance with the GDPR. Although absolute security does not exist, it is essential that organizations demonstrate having taken reasonably expected measures. He also emphasized the obligation to notify data breaches and the importance of transparent communication to maintain trust.

The meeting, which also brought together the Media Agency (AEM), the Competition Protection Agency (AZTN), the Croatian Financial Services Supervisory Agency (Hanfa), the Croatian Energy Regulation Agency (HERA), the Croatian National Bank (HNB), and the Croatian Regulatory Authority for Network Industries (HAKOM), highlighted the need for a coordinated approach to the resilience of communication infrastructures. Participants stressed the need for clear protocols, regular exercises, and rapid information exchange between regulators, operators, and European partners to ensure the continuity of essential services.