Enforcing jurisdiction
Hungary · Geography does not establish applicable law.
Confirmed applicable legislation
Privacy topics

Budapesti Műszaki és Gazdaságtudományi Egyetem (Budapest University of Technology and Economics) – €22,200 Fine (Hungary, 2020)

€22,200Nemzeti Adatvédelmi és Információszabadság Hatóság10 December 2020Hungary
final
Fine

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

The Budapest University of Technology and Economics was fined €22,200 for improperly handling personal data during scholarship application audits. They processed sensitive information without a valid reason, which is against privacy rules. This ruling serves as a reminder for educational institutions to handle personal data carefully and only collect what is necessary.

What happened

The university unlawfully processed personal data during audits of scholarship applications, including sensitive information.

Who was affected

Students who applied for scholarships at the Budapest University of Technology and Economics.

What the authority found

The authority fined the university €22,200 for violating GDPR by processing data without a legal basis.

Why this matters

This case stresses the need for educational institutions to follow strict data protection rules. It serves as a warning that failure to comply can lead to significant fines.

Recorded legal citations
Automatically processed
Art. 12 GDPR
Art. 13 GDPR
Art. 5(1)(a) GDPR
Art. 6(1) GDPR
Art. 9(2) GDPR
View original scraped data
Art. 5(1) a) GDPR
b)
c) GDPR
Art. 6(1) GDPR
Art. 9(2) GDPR
Art. 12(GDPR)
Art. 13(GDPR)

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Linked-source text retrieved.

Review needed — 13 March 2026.

Processing notes: articles corrected, amount discrepancy.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The Hungarian DPA (NAIH) imposed a fine of EUR 22,200 against the Budapest University of Technology and Economics. NAIH finds that the controller unlawfully processed personal data in the course of audits of applications for social scholarships. Among other things, data was processed without a legal basis and in some cases particularly sensitive data was processed, although this was not necessary for the evaluation of the scholarship applications.

Related Enforcement Actions (0)

No other enforcement actions found for Budapesti Műszaki és Gazdaságtudományi Egyetem (Budapest University of Technology and Economics) in HU

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

10 December 2020

Authority

Nemzeti Adatvédelmi és Információszabadság Hatóság

Fine Amount

€22,200

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Budapesti Műszaki és Gazdaságtudományi Egyetem (Budapest University of Technology and Economics) - Hungary (2020). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: