Enforcing jurisdiction
Hungary · Geography does not establish applicable law.
Confirmed applicable legislation

Obuda University – €4,200 Fine (Hungary, 2026)

€4,200Nemzeti Adatvédelmi és Információszabadság Hatóság5 February 2026Hungary
final
Fine

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

Obuda University was fined for improperly collecting personal data from students applying for housing. This is significant because it highlights the need for educational institutions to follow data protection rules closely. Other universities should ensure they only collect essential information from students.

What happened

Obuda University processed excessive personal data, including unnecessary health information, from student housing applicants.

Who was affected

Students applying for housing at Obuda University were affected by the excessive data collection.

What the authority found

The Hungarian DPA determined that the university violated GDPR by collecting more data than necessary and not providing adequate privacy information.

Why this matters

This ruling stresses the importance of data minimization, encouraging educational institutions to limit data collection. Other universities should examine their data practices to prevent similar issues.

Recorded legal citations
Automatically processed
Art. 5(1)(a) GDPR
Art. 6(1) GDPR
Art. 9(2) GDPR
View original scraped data
Art. 5(1) a) GDPR
c) GDPR
Art. 6(1) GDPR
Art. 9(2) GDPR

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Linked-source text retrieved.

Review needed — 27 May 2026.

Processing notes: amount discrepancy.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

Insufficient legal basis for data processing

Related Enforcement Actions (0)

No other enforcement actions found for Obuda University in HU

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

5 February 2026

Authority

Nemzeti Adatvédelmi és Információszabadság Hatóság

Fine Amount

€4,200

Enforcement Tracker ID

3183

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Obuda University - Hungary (2026). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: