The protection of the privacy of tourist entities is not sufficiently exposed in the media for the society to be interested in the changes brought about by the latest amendments, so a summary or chronological development of the event from 1995 to the latest changes in the Croatian legal system and legislation. The GDPR, or the General Data Protection Regulation, received more media attention in 2018 when most EU member states introduced it into national legislation. The hypothesis that guided the topic of the paper was: The protection of the privacy of tourist entities in Croatian law needs to be harmonized with all legal aspects of the European Union. The aim of this paper was to present and explain how the General Data Protection Regulation has affected the legal aspect of the protection of natural and legal persons in Croatia and the possibilities for improving it. Although the term of privacy protection is quite complex nowadays, great efforts are made to ensure as many possible problematic situations and misunderstandings, ie their solutions so that neither side would be harmed, and so that all legal aspects of privacy protection would be satisfied. Methods of synthesis and analysis, compilation method and descriptive method were used in the paper.