This paper is dedicated to the demarcation of two equally important rights: the right to access information and the right to protect personal data. In the first part of the paper, the historical development of personal data protection is presented, and special emphasis is placed on the General Data Protection Regulation (GDPR), which is very relevant in today's society because it achieved the purpose of harmonizing the European legal framework for the protection of personal data and harmonizing the national legislation with the European acquis. The right to privacy is gaining more and more importance in our lives, and the awareness of the interested public about their right to access information is also growing. On the other hand, the organization and development of the right to access information in the territory of the Republic of Croatia according to the Act on the Right to Access Information is presented. In the second part, the procedure for exercising the right to access to information, the limitation of the right to access to information is described, the obligations of public authorities are elaborated, and special importance is given to the analysis of the public interest test. The following institutes were also developed: Information Commissioner, Data Protection Authority (hereinafter: DPA) and Personal Data Protection Officer. Furthermore, the judicial practice was analysed, which tried to demarcate these two rights and bring closer to the reader whose interest will prevail, private or public. In conclusion, the paper contains an analysis of the annual report on the work of DPA, a report on the implementation of the Act on the Right to Access Information, and a review of the quality of the exercise of these rights in the Republic of Croatia.