Detailed overview
Croatia is regulated by the EU AI Act. Croatian AI providers, deployers, importers and distributors must classify AI systems under the EU AI Act and apply the relevant duties. Prohibited AI is banned. High-risk AI must meet strict requirements. AI systems with transparency risks and general-purpose AI models have separate EU obligations.
Croatia's national AI framework is developing through digital-transformation policy and the forthcoming National AI Development Plan until 2032. Official Croatian Government materials state that the draft National AI Development Plan until 2032 was developed by more than 150 experts, would be opened to public consultation and was expected to be adopted in 2026. The stated goals include digital skills and human capital, strong infrastructure, ethical AI use, AI research and AI applications in the economy. Priority sectors include public administration, healthcare, agriculture and environment, energy, transport and tourism.
Croatia's Digital Croatia Strategy until 2032 also treats advanced technologies such as AI, machine learning, 5G/6G and digital services as part of the country's digital transformation. This strategy supports the wider policy environment for AI adoption, even though binding AI compliance comes from the EU AI Act and sectoral law.
High-risk AI in Croatia may include AI used in employment, education, biometric identification, credit, insurance, public services, healthcare, law enforcement, migration, critical infrastructure and justice. Providers of such systems must implement risk management, data governance, documentation, conformity assessment, human oversight, accuracy, robustness and cybersecurity. Deployers must use systems correctly, monitor operation and inform affected persons where required.
AI systems in Croatia may also trigger GDPR, cybersecurity, employment, consumer, healthcare, transport, financial, public-sector and product-safety rules.
Penalties follow the EU AI Act. Breaches of prohibited AI practices may lead to fines up to EUR 35 million or 7% of worldwide annual turnover. Other AI Act breaches may lead to fines up to EUR 15 million or 3%, and misleading information may lead to fines up to EUR 7.5 million or 1%.
Practical requirements & details
Sourced from Regulation (EU) 2024/1689 (the EU AI Act), the draft National AI Development Plan until 2032 and the Digital Croatia Strategy until 2032.
EU AI Act classifications
- Prohibited AI — banned.
- High-risk AI — strict requirements.
- Transparency-risk AI — disclosure duties.
- GPAI models — separate EU obligations.
National AI Development Plan until 2032
- Drafted by 150+ experts; public consultation; expected adoption in 2026.
- Goals: digital skills and human capital, strong infrastructure, ethical AI use, AI research and AI applications in the economy.
- Priority sectors: public administration, healthcare, agriculture and environment, energy, transport and tourism.
Digital Croatia Strategy until 2032
- Treats AI, machine learning, 5G/6G and digital services as part of digital transformation.
- Supports the wider policy environment for AI adoption.
High-risk areas
- Employment, education, biometric identification, credit, insurance, public services, healthcare, law enforcement, migration, critical infrastructure and justice.
Provider duties
- Risk management, data governance, documentation, conformity assessment, human oversight, accuracy, robustness and cybersecurity.
Deployer duties
- Use systems correctly, monitor operation and inform affected persons where required.
Overlapping legal regimes
- GDPR, cybersecurity, employment, consumer, healthcare, transport, financial, public-sector and product-safety rules.
Penalties
- EUR 35 million or 7% of worldwide annual turnover — breaches of prohibited AI rules.
- EUR 15 million or 3% of worldwide annual turnover — breaches of many other AI Act operator obligations.
- EUR 7.5 million or 1% of worldwide annual turnover — supplying incorrect, incomplete or misleading information to authorities.
Related entries
See also the European Union entry, which covers the EU AI Act (Regulation (EU) 2024/1689) — the substantive framework that this jurisdiction implements and supervises domestically.