Unknown – €97,150 Fine (Hungary, 2020)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A Hungarian credit institute was fined for collecting too much personal data from parents applying for a childbirth incentive loan. The institute copied the entire pregnancy booklet, which was unnecessary and violated data protection rules. This case highlights the importance of collecting only the data needed for a specific purpose.
What happened
A credit institute copied entire pregnancy booklets from parents applying for a loan, collecting excessive personal data.
Who was affected
Parents applying for a childbirth incentive loan who had their pregnancy booklets copied by the credit institute.
What the authority found
The Hungarian DPA found the credit institute violated data protection rules by collecting more data than necessary, lacking a valid legal basis.
Why this matters
This decision emphasizes the principle of data minimization, reminding companies to only collect data necessary for their purposes. Businesses should review their data collection practices to ensure compliance with privacy laws.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Review needed — 10 March 2026.
Processing notes: articles corrected, amount discrepancy.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Hungarian DPA (NAIH) imposed a fine of EUR 97,150 against a credit institute. Two parents contacted the Hungarian DPA regarding the processing of personal data by their credit institute related to a 'childbirth incentive loan'. The couple requested a suspension of repayment, for which they had to prove that the fetus is at least 12 weeks old. To certify this fact, the controller copied their entire pregnancy booklet. The NAIH found that the controller violated the principle of data minimization by copying the entire pregnancy booklet, which contained excessive amounts of health data, even though this was not necessary regarding the purpose of the processing. For this reason, the NAIH ultimately concluded that the controller had no legal basis for such extensive data processing
Related Enforcement Actions (7)
Other enforcement actions involving Unknown in HU
Fine
€97K
Details
Fine Date
16 December 2020
Authority
Nemzeti Adatvédelmi és Információszabadság Hatóság
Fine Amount
€97,150
About this data
Cite as: Cookie Fines. Unknown - Hungary (2020). Retrieved from cookiefines.eu
Last updated: