US Rijeka - Us I-199/2025-9

Facts }}}} A Court annulled the DPA dismissal of a GDPR complaint, ruling it must examine whether a data subject’s personal data was unlawfully disclosed.A court held that the DPA is required to investigate a data subject’s complaint and issue a decision on the merits. In the specific case, the court ordered the DPA to issue a decision regarding an alleged unlawful disclosure of personal data within 60 days. == English Summary ==== English Summary == === Facts ====== Facts === On 28 January 2025, the Croatian Personal Data Protection Agency (AZOP) dismissed a complaint from a data subject who alleged that an education inspector had disclosed his personal data to the principal of a music school in Rijeka. The data subject claimed that the inspector copied him on an email to the principal without his consent, revealing his identity and breaching the GDPR and the Croatian implementing act. AZOP rejected the complaint, stating that there were no legal grounds to open a procedure, without a