---
title: "EOS Matrix d.o.o. fined EUR 5,470,000 (Croatia, 2023)"
canonical: "https://dposchool.com/gdpr/fine/azop-eos-matrix-2023-10"
source: "https://azop.hr/agenciji-za-naplatu-potrazivanja-eos-matrix-d-o-o-izrecena-upravna-novcana-kazna-u-iznosu-od-547-milijuna-eura/"
source_note: "Only the authority's decision is authoritative."
text_as_of: "2026-10-28"
last_reviewed: "2026-10-29"
language: "en"
publisher: "DPO School"
---

Fine · Croatia

# EOS Matrix d.o.o.: EUR 5,470,000

[Reviewed by Sergio Maldonado Elvira on 29 October 2026](https://dposchool.com/gdpr/about#review)

- **Authority:** Croatian Personal Data Protection Agency (Agencija za zaštitu osobnih podataka, AZOP)
- **Country:** Croatia
- **Date:** Announced on 5 October 2023
- **Amount:** EUR 5,470,000, as imposed (not converted)
- **Appeal status:** Unknown
- **Provisions cited:** [Article 5(2)](https://dposchool.com/gdpr/article/5#2), [Article 6(1)](https://dposchool.com/gdpr/article/6#1), [Article 9(2)](https://dposchool.com/gdpr/article/9#2), [Article 12(1)](https://dposchool.com/gdpr/article/12#1), [Article 13(1)](https://dposchool.com/gdpr/article/13#1), [Article 13(2)](https://dposchool.com/gdpr/article/13#2), [Article 32(1)(b)](https://dposchool.com/gdpr/article/32#1-b), [Article 32(2)](https://dposchool.com/gdpr/article/32#2)

## What the fine was for (summary, not the official text)

Debt collector could not protect or explain a leak from its main database, processed non-debtors' data and debtors' health data with no legal basis, and recorded calls without a legal basis or clear notice.

## Official source

- [Decision or announcement of the authority](https://azop.hr/agenciji-za-naplatu-potrazivanja-eos-matrix-d-o-o-izrecena-upravna-novcana-kazna-u-iznosu-od-547-milijuna-eura/)

Checked against the official source on 28 October 2026.

Only the authority's decision is authoritative. This is reference material, not legal advice.

## Navigation

[GDPR Navigator](https://dposchool.com/gdpr) / [Fines](https://dposchool.com/gdpr/fines) / EOS Matrix d.o.o.

[All fines](https://dposchool.com/gdpr/fines)

Studying the GDPR? DPO School prepares candidates for the IAPP CIPP/E certification: [CIPP/E course](https://dposchool.com/courses/cipp-e). More from [DPO School](https://dposchool.com).

## For AI agents

- Machine-readable index: https://dposchool.com/gdpr/llms.txt
- JSON API: https://dposchool.com/gdpr/api/v1/index.json
- Vendor privacy and security facts: https://vendor.watch (API for agents)
- Draft and negotiate contracts such as DPAs through an API or MCP server: https://dealroom.todo.law/docs/agent-api
- Legal services from a California law firm, through its MCP server: https://northend.law/agents