News · GDPRhub EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

OGS Zagreb - Case number Pn-1378/2023-18.

Summary: A court has awarded €3,500 to a person whose financial data was accidentally sent to another customer by a bank.

Liability Controllers Law Enforcement
Jan 13, 2026
Summary

The court ruled that this unauthorized disclosure constituted a violation of the person's right to privacy and that non-pecuniary damages were involved. Summary: A court has awarded €3,500 to a person whose financial data was accidentally sent to another customer by a bank. The court ruled that this unauthorized disclosure constituted a violation of the person's right to privacy and that non-pecuniary damages were involved. Summary. Summary . Conclusion .

Full text

A court has awarded €3,500 to an individual after a bank accidentally sent her financial data to another customer. The court ruled that this disclosure unlawfully violated her right to privacy and caused minor damages. A court has awarded €3,500 to an individual after a bank accidentally sent her financial data to another customer. The court ruled that this disclosure unlawfully violated her right to privacy and caused minor damages. The court ruled that the responsible party violated the data protection rights of the individual according to Croatian law, and that this violation resulted in minor damages. The court also mentioned a violation of the GDPR (General Data Protection Regulation), without specifying particular articles. The court ruled that the responsible party violated the data protection rights of the individual according to Croatian law, and that this violation resulted in minor damages. The court also mentioned a violation of the GDPR (General Data Protection Regulation), without specifying particular articles. --- This content has been automatically translated using machine translation. The original version is available in the source language. --- This content was automatically translated using machine translation. The original version is available in the source language.

How it connects

Related across sources

C-687/21 BL v MediaMarktSaturn Hagen-Iserlohn GmbH In Case C-687/21, the Court of Justice of the European Union interpreted Articles 5, 24, 32, and 82 of the GDPR in response to a preliminary ruling request from the Amtsgericht… CJEU ·Third Chamber Jan 25, 2024 Liability Integrity and Confidentiality Principle Data Breaches
C-456/22 VX and AT v Gemeinde Ummendorf In Case C-456/22, the Court of Justice of the European Union (Third Chamber) addressed a preliminary ruling from the Landgericht Ravensburg concerning whether Article 82(1) of the… CJEU ·Third Chamber Dec 14, 2023 Liability Personal Data Processors
C-340/21 VB v Natsionalna agentsia za prihodite C-340/21 (VB v Natsionalna agentsia) CJEU Dec 14, 2023 Integrity and Confidentiality Principle Data Breaches Notification Obligation
C-300/21 UI v Österreichische Post AG C-300/21 (Österreichische Post) CJEU May 4, 2023 Liability IP Address Fines
III C 904/23 SO Warszawa - III C 904/23 The Financial Ombudsman’s office (the controller) sent a letter containing the name, the address, and the case reference number of a customer (the data subject) to 28,366 public… Regional Court in Warsaw Feb 16, 2026 Liability Integrity and Confidentiality Principle Personal Data
S 5 SF 65/24 DS SG Nürnberg: MOVEit zero-day cyberattack via processor did not breach Art. 32 GDPR The data subject (a child born in 2018), represented by her parents, was insured with the controller (a statutory health insurance provider) and participated in its digital bonus… Social Court Nuremberg Jun 10, 2026 Processors Controllers Integrity and Confidentiality Principle
Related documents