VPNs with servers in Croatia

Whether these duties reach a VPN operator is not established.

A 2025 amendment of the Games of Chance Act, in force from 1 May 2025, targets unlicensed gambling operators; trade reporting describes blocking of payments by banks to blacklisted operators among its tools.

Article 325 of the Criminal Code punishes publicly inciting violence or hatred against a group or its member on grounds including race, religion, origin, language, colour, sex, sexual orientation, gender identity or disability, or making such material available, including through computer systems or networks. The basic offence carries up to three years’ imprisonment; organising or leading a group of three or more for that purpose, six months to five years.

Publicly approving, denying or grossly trivialising genocide, aggression, crimes against humanity or war crimes in a way likely to incite violence or hatred carries the basic penalty. Under Article 87(21) a hate crime is an aggravating circumstance unless the Code prescribes a harsher penalty.

The Security and Intelligence Agency (SOA) describes four layers of oversight. The Office of the National Security Council monitors legality, effectiveness and finances and may interview the director and staff; Parliament, directly or through its Committee for Internal Policy and National Security, may request reports on covert measures.

A Council for Civilian Oversight monitors the legality of the agency’s work and of covert measures that may limit constitutional rights, and the Supreme Court’s permission is required for measures that temporarily limit certain rights and freedoms.

The order of the rows is the security score, and a server’s location is not a recommendation.