- Enforcing jurisdiction
- Hungary · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
DPA case NAIH / 2020/6484 – Complaint Upheld (Hungary, 2020)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
A complainant asked a company for specific information about how their personal data was being used, but the company only provided a general notice. The authority found this response inadequate, showing that companies must give clear and personalized information when asked.
What happened
The company failed to provide accurate, personalized information about the processing of a complainant's personal data.
Who was affected
The individual who requested specific information about their personal data from the company.
What the authority found
The authority concluded that the company breached GDPR rules by not giving specific answers to the complainant's request.
Why this matters
This ruling highlights the obligation for companies to provide clear and detailed information about personal data processing. Businesses should ensure they have processes in place to respond adequately to such requests.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 18 October 2026.
No issues were reported by that automated check.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
A complainant requested a controller to provide him with accurate, personalized information about processing of personal data. The controller failed to do so and shared with him only a general data protection notice. The DPA found out that a content of controller's reply did not provide the complainant with an accurate, personalized information about the handling of his personal data. The DPA concluded that the controller has breached the general rule of Article 15 (1) (a), c) and d) of the GDPR by not giving substantive, specific answers to the request under Article 15 and by sharing only a link to a general data protection notice.
Outcome
Complaint Upheld
A data subject complaint that was upheld by the DPA.
Related Enforcement Actions (0)
No other enforcement actions found for DPA case NAIH / 2020/6484 in HU
This is the only recorded action for this entity in this jurisdiction.
Details
Decision Date
16 December 2020
Authority
Nemzeti Adatvédelmi és Információszabadság Hatóság
GDPRhub ID
gdprhub-3077About this data
Cite as: Cookie Fines. DPA case NAIH / 2020/6484 - Hungary (2020). Retrieved from cookiefines.eu
Last updated: