Claim management company – €2,850 Fine (Hungary, 2019)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A claim management company in Hungary was fined for processing personal data without a valid legal basis. The company received data from a bank but couldn't justify its processing under GDPR rules. This case serves as a reminder that businesses must ensure they have a legitimate reason to process personal data.
What happened
The claim management company processed personal data without a valid legal basis.
Who was affected
Individuals whose data was transferred from a bank to the claim management company.
What the authority found
The authority found that the company lacked a valid legal basis for processing the data, as neither consent nor contract performance applied.
Why this matters
This case highlights the need for companies to establish a clear legal basis for data processing. It underscores the importance of understanding GDPR requirements when handling transferred data.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Review needed — 15 March 2026.
Processing notes: articles corrected, national law identified, amount discrepancy.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The complainants stated during the case that they concluded a credit agreement with the bank, which sold its claim against the complainants and transferred their respective data to a third-party company (controller). NAIH determined in the case that the controller can neither rely on the consent of the data subjects nor the performance of the credit contract as the legal basis of the data processing, since the data subjects concluded such contract with the bank, not with the controller. The appropriate legal basis for processing could have been the legitimate interest of the controller.
Related Enforcement Actions (0)
No other enforcement actions found for Claim management company in HU
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
3 June 2019
Authority
Nemzeti Adatvédelmi és Információszabadság Hatóság
Fine Amount
€2,850
About this data
Cite as: Cookie Fines. Claim management company - Hungary (2019). Retrieved from cookiefines.eu
Last updated: