- Enforcing jurisdiction
- Hungary · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
DPA case NAIH/2020/2000/5 – Violation Found (Hungary, 2020)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Hungary's data protection authority found that a company's data management practices were misleading and not compliant with privacy laws. They required the company to fix their information practices to better inform users about their rights. This ruling is significant because it emphasizes the need for clear communication about how personal data is handled.
What happened
The authority discovered that the company's data management prospectus contained misleading information about data retention and user rights.
Who was affected
Users whose personal data was managed by the company.
What the authority found
The authority concluded that the company's prospectus did not meet GDPR requirements for transparency and user rights.
Why this matters
This finding stresses the importance for companies to provide clear and accurate information to users about their data practices. It serves as a reminder that transparency is crucial in building trust with customers.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 18 October 2026.
Processing notes: articles corrected, national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
After being notified and in light of previous interactions with the controller, the NAIH initiated an ex officio proceeding to examine, amongst other things, the "data management prospectus" of the controller. Was the controller's data management prospectus" in line with the GDPR? The NAIH held that several elements of this prospectus were not in line with the requirements in Articles 12 and 13, including: * misleading information to data subjects about the retention of data and its possible transfer to a third party; * the legal basis for the processing not being clearly indicated; * a lack of information for data subjects regarding how to exercise their rights, such as the to the right to erasure and the right to file a complaint. As a result, the NAIH ordered the controller to bring their processing into line with the provisions of the GDPR, pursuant to their powers under Article 58(2)(d).
Outcome
Violation Found
The DPA found a violation but did not impose a fine.
Related Enforcement Actions (0)
No other enforcement actions found for DPA case NAIH/2020/2000/5 in HU
This is the only recorded action for this entity in this jurisdiction.
Details
Decision Date
3 August 2020
Authority
Nemzeti Adatvédelmi és Információszabadság Hatóság
GDPRhub ID
gdprhub-2639About this data
Cite as: Cookie Fines. DPA case NAIH/2020/2000/5 - Hungary (2020). Retrieved from cookiefines.eu
Last updated: