Enforcing jurisdiction
Hungary · Geography does not establish applicable law.
Confirmed applicable legislation

Website operator – €2,800 Fine (Hungary, 2021)

€2,800Nemzeti Adatvédelmi és Információszabadság Hatóság20 April 2021Hungary
final
Fine

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

A website operator in Hungary was fined EUR 2,800 for not proving that it was legally allowed to process personal data. This ruling is crucial because it highlights the responsibility businesses have to show compliance with data protection laws.

What happened

The website operator failed to demonstrate the legality of its personal data processing when requested by the data protection authority.

Who was affected

Users whose personal data was processed by the website operator.

What the authority found

The Hungarian data protection authority found that the website operator breached its duty to prove lawful data processing.

Why this matters

This case underscores the importance of accountability in data processing. Website operators must keep clear records to show they are following the law.

Recorded legal citations
Automatically processed
Art. 24 GDPR
Art. 5(2) GDPR
View original scraped data
Art. 5(2) GDPR
Art. 24(GDPR)

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Linked-source text retrieved.

Review needed — 15 March 2026.

Processing notes: amount discrepancy.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The Hungarian DPA (NAIH) has imposed a fine of EUR 2,800 on a website operator. The controller had failed to prove the lawfulness of its processing of personal data upon request by the DPA. The DPA considered this to be a breach of the controller's duty of accountability.

Related Enforcement Actions (0)

No other enforcement actions found for Website operator in HU

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

20 April 2021

Authority

Nemzeti Adatvédelmi és Információszabadság Hatóság

Fine Amount

€2,800

Enforcement Tracker ID

ETid-812

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Website operator - Hungary (2021). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: