Law note · Croatia
GDPR Chapter V, Cross-Border Transfer Restrictions
cite Regulation (EU) 2016/679, Arts. 44-49, 83(5)(c)
stage In effect
since 2018-05-25
reviewed 2026-08-24
A transfer of personal data outside the EEA requires an adequacy decision, appropriate safeguards, or a narrow Article 49 derogation, backed by the Article 83(5)(c) top fine tier. Two commentary sources independently confirm no further Croatian addition beyond the General Data Protection Regulation (GDPR) baseline.
What it asks of an app
- Rely on an adequacy decision, Standard Contractual Clauses, Binding Corporate Rules, or a narrow Article 49 derogation before moving personal data of a person in Croatia outside the EEA.
When LexLint raises it
Declared activities: crawls_web, trains_models
Primary source: GDPR Arts. 44-49, 83(5)(c)
CMS and DLA Piper commentary