Claim management company – €2,850 Fine (Hungary, 2019)

€2,850Nemzeti Adatvédelmi és Információszabadság Hatóság3 June 2019Hungary
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

A claim management company in Hungary was fined for processing personal data without a valid legal basis. The company received data from a bank but couldn't justify its processing under GDPR rules. This case serves as a reminder that businesses must ensure they have a legitimate reason to process personal data.

What happened

The claim management company processed personal data without a valid legal basis.

Who was affected

Individuals whose data was transferred from a bank to the claim management company.

What the authority found

The authority found that the company lacked a valid legal basis for processing the data, as neither consent nor contract performance applied.

Why this matters

This case highlights the need for companies to establish a clear legal basis for data processing. It underscores the importance of understanding GDPR requirements when handling transferred data.

GDPR Articles Cited

Art. 5 GDPR
Art. 6 GDPR
Full Legal Summary
Detailed

The complainants stated during the case that they concluded a credit agreement with the bank, which sold its claim against the complainants and transferred their respective data to a third-party company (controller). NAIH determined in the case that the controller can neither rely on the consent of the data subjects nor the performance of the credit contract as the legal basis of the data processing, since the data subjects concluded such contract with the bank, not with the controller. The appropriate legal basis for processing could have been the legitimate interest of the controller.

Related Enforcement Actions (0)

No other enforcement actions found for Claim management company in HU

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

3 June 2019

Authority

Nemzeti Adatvédelmi és Információszabadság Hatóság

Fine Amount

€2,850

Enforcement Tracker ID

ETid-253

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Claim management company - Hungary (2019). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: