Croatia

National implementing act for the European Green Bond Regulation, listed by Hanfa among its capital-market regulations (NN 17/25).

National transposition of the NIS2 Directive (NN 14/24). Provides for categorisation of essential and important entities (Arts. 17-19), mandatory CSIRT incident notification (Art. 37) and voluntary notification (Art. 39), and a national incident platform run by CARNET (Art. 43). Art. 4(1) names the Security and Intelligence Agency as the central state body for cybersecurity and the HNB and Hanfa among the bodies for sector-specific laws.

National DORA implementing act (NN 136/24). Names Hanfa and the HNB as competent authorities (Arts. 7-9), routes significant ICT incident reports to them and to the CSIRT (Arts. 14-15), and sets misdemeanour fines of up to 3% of annual revenue for legal entities (Art. 19). Applies to the whole financial sector, so it is also administered by Hanfa.

Designates Hanfa as competent authority for crypto-asset service providers and for crypto-assets other than asset-referenced and e-money tokens (Arts. 6, 8), and the HNB for issuers of those two token types (Art. 8(3)). Covers CASP authorisation (Art. 14), revocation (Art. 15), management board approval (Art. 18) and supervisory measures (Art. 47). NN 85/24.

Requires employers with at least 50 workers to set up an internal reporting channel and appoint a confidential person, names the Ombudsman as external reporting body, and prohibits retaliation. NN 46/22, amended by NN 136/25 (published 5 November 2025, in force on the eighth day after publication), which widened reportable breaches and gave reports made directly to police or prosecutors the same protection.

Sets the reporting form (UZSPN-O-61), required data, submission channels and exemptions for cash transaction reports to the Anti-Money Laundering Office. NN 1/19 originally covered transactions of HRK 200,000 or more; NN 11/23 replaced the threshold with EUR 10,000.

Prescribes form UZSPN-O-59 for reporting suspicious transactions, funds and persons to the Anti-Money Laundering Office, the electronic or paper submission channels, and what to do when electronic submission fails. Ministry of Finance rulebook, NN 1/19.

Main securities and capital-markets statute (NN 65/18), amended by NN 17/20, 83/21, 151/22, 85/24 and 126/25 and supplemented by NN 45/26, per Hanfa's unofficial consolidated text.

Governs the issuing of electronic money and electronic money institutions. OG 64/2018, amended by OG 114/2022 and OG 136/2024.

Governs payment services and payment institutions. OG 66/2018, amended by OG 114/2022 and OG 136/2024; HNB publishes an unofficial consolidated version.

Names AZOP as the supervisory authority (Art. 4), regulates administrative fines and sets rules on video surveillance, including a six-month default retention limit for recordings (Art. 29). NN 42/2018.

Designates the national competent bodies for electronic identification and trust services and sets duties for signatories (Arts. 9-10: protect electronic signature creation data, report changes to the provider within 7 days) and for trust service providers (Art. 13: keep certificate data and documentation for at least 10 years). Art. 17 applies the signatory duties to electronic seals, time stamps and registered electronic delivery. The supervisor of trust service providers is the central state administration body responsible for economic affairs (Art. 4). Published as NN 62/17; Art. 20 ends the application of the Electronic Signature Act (NN 10/02, 80/08, 30/14).

Sets the AML/CFT regime for obliged entities: risk assessment, internal controls and an authorised person, customer due diligence, reporting to the Anti-Money Laundering Office, and a register of beneficial owners. Original NN 108/17, amended by NN 39/19 and NN 151/22. Registration of virtual asset service providers is provided for in Art. 9.a.

Main insurance statute (NN 30/15), amended by NN 112/18, 63/20, 133/20, 151/22, 152/24 and 151/25 according to Hanfa's unofficial consolidated text.

Governing act of the Croatian National Bank (OG 75/2008), amended by OG 54/2013 and OG 47/2020.

Establishes Hanfa and sets its powers. Hanfa publishes an unofficial consolidated text covering NN 140/05 and 12/12, with a further amendment listed as NN 154/11.