EOS Matrix battles back against Croatian DPA in $5.8M GDPR case

Croatia

Debt collector EOS Matrix said it will challenge a General Data Protection Regulation (GDPR) penalty levied against it by the Croatian data protection authority (AZOP) after finding the data in question in the case does not match the data in its database.

AZOP announced a penalty of nearly 5.5 million euros (U.S. $5.8 million) against EOS Matrix on Oct. 5 for violating the GDPR regarding the protection and processing of individuals’ personal data. The regulator’s investigation was informed by an anonymous complaint it received in March that EOS Matrix had processed the personal data of a large number of debtors without authorization.

AZOP said it received a USB stick containing more than 180,000 personal data points for individuals with outstanding debts to initial creditors purchased by EOS Matrix. It found the company did not implement sufficient technical protection measures to ensure proper processing and safeguarding of its data, among other alleged violations.

lock iconTHIS IS MEMBERS-ONLY CONTENT. To continue reading, choose one of the options below.