Bank – €2,890 Fine (Hungary, 2020)

€2,890Nemzeti Adatvédelmi és Információszabadság Hatóság26 March 2020Hungary
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

A Hungarian bank mistakenly registered and shared a person's data with a credit information system due to an administrative error. This matters because it highlights the importance of accurate data handling to avoid unauthorized data sharing. The bank was fined for not having a valid reason to process this person's data.

What happened

A bank registered and transferred a person's data to a credit system without their involvement in a loan agreement.

Who was affected

An individual whose personal data was wrongly registered and shared with the Central Credit Information System.

What the authority found

The authority found that the bank lacked a valid legal basis for processing the individual's data, violating GDPR rules.

Why this matters

This case underscores the need for businesses to ensure data accuracy and proper legal grounds before processing personal information. It serves as a reminder to companies to regularly audit their data handling practices to prevent similar errors.

GDPR Articles Cited

Art. 5 GDPR
Art. 6 GDPR
Full Legal Summary
Detailed

Due to an administrative error, the personal data of the data subject were registered and transferred to the Central Credit Information System (CCI) in connection with a loan agreement, without the data subject being a party to the agreement.

Details

Fine Date

26 March 2020

Authority

Nemzeti Adatvédelmi és Információszabadság Hatóság

Fine Amount

€2,890

Enforcement Tracker ID

ETid-303

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Bank - Hungary (2020). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: