Carnet - user verification

User Verification: What Does the New Cybersecurity Act Mean for .hr and .com.hr Domains?

On 7 February 2024, the Cybersecurity Act (NN 14/2024-254) was published, introducing new obligations and rules for service providers in the digital environment. One of the key changes concerns the registry and registrars of .hr and .com.hr domains. Under the legal provisions, when registering or renewing domains it is necessary to establish the exact identity of users, i.e. to carry out their verification.

When does verification become mandatory?
The verification obligation takes effect on 15 February 2025. This means that all users wishing to register new .hr or .com.hr domains or renew existing ones will have to submit the documents required to confirm their identity. This obligation applies to both natural persons and legal entities.

What does the verification process look like?
During the domain registration or renewal procedure, you will be asked for an appropriate document or statement to confirm your identity. If you have already submitted a request to register or renew a domain, you will need to provide the documentation within a specified deadline, in accordance with the legal requirements.
Our support team will give you detailed instructions on how to submit the documentation (electronically, by post, or in person).

Which documents are considered valid?
The Act defines which documents may be used for identity verification, depending on whether the person is a natural person or a legal entity.

Natural persons may submit one of the following documents:

Identity card
Passport
Certificate of residence issued by the competent authority (digitally signed or stamped)
Driver's license
A statement by the natural person, digitally signed with a verified digital signature (stating the purpose and the details: first name, last name, personal identification number)
Legal entities must submit documents confirming the identity of the person authorized to represent them, for example:

Identity card of the person authorized to represent the legal entity
Passport of the person authorized to represent the legal entity
Certificate of residence issued by the competent authority (digitally signed or stamped) of the person authorized to represent
Driver's license of the person authorized to represent the legal entity
A statement by the person authorized to represent the legal entity, digitally signed with a verified digital signature (stating the purpose and the details: first name, last name, OIB/VAT number)
A document or statement bearing the signature and stamp of the legal entity (stating the purpose, with the legal entity's details: name, OIB/VAT number)
If the person authorized to represent the legal entity cannot be determined from the available online registries, an official document naming that person as the legal representative must additionally be submitted.

Why is verification required?
The main goal of this legal obligation is to increase security in the online space, reduce the misuse of internet resources, and prevent fraud. Verification enables transparency of data about domain owners, better protection of end users, and more effective tracking of cybersecurity incidents. This contributes to greater security of the entire digital ecosystem.

How to prepare?
Check your documents
Make sure you have a valid document (or statement) with which you can prove your identity. If you are a legal entity, check that the official documents naming the persons authorized to represent it are up to date.

Contact our support
If you plan to register a new .hr or .com.hr domain or renew an existing one, get in touch with our support team. We will gladly guide you through all the necessary steps and explain how to submit the documentation.

Prepare for the legal deadlines
Although the obligation begins on 15 February 2025, it is a good idea to start planning and informing yourself now, so you are not caught off guard by the new procedures.

Conclusion
The new Cybersecurity Act is an important step toward creating a safer digital environment in Croatia. Although the verification procedure itself adds a few extra administrative steps, its purpose is to provide a higher level of protection for all internet users.

More info at: https://domene.hr/portal/news/verifikacija_korisnika