This Regulation prescribes the classification of data and the criteria for determining the degrees of secrecy for data from the area of critical infrastructure. This Regulation shall apply to all state bodies, bodies of local and regional self-government units and legal entities that, in the process of drafting acts in the area of critical infrastructure, create, access or handle related classified and unclassified data. The label "RESTRICTED" denotes data whose unauthorized disclosure would harm the operation and performance of the tasks of the competent authorities in performing tasks in the area of critical infrastructure, and in particular: list of confirmed critical entities for each individual sector; list of confirmed critical entities and critical entities of special European importance; sectoral risk analysis carried out by competent authorities; report on the status of the development of risk assessments and safety plans for each individual sector; annual report on the development of risk assessments and security plans / resilience plans of critical entities; and the security plan of the critical entity. The label "UNCLASSIFIED" denotes data that is generated in the work of the Coordinating Body, competent bodies and critical entities in the performance of work in the area of critical infrastructure, and which is not marked with a certain degree of secrecy, and is used for official purposes (see article 4 for full description).
Croacia · 2026-07-21