Aldi – €253,000 Fine (Hungary, 2023)

€253,000Nemzeti Adatvédelmi és Információszabadság Hatóság12 April 2023Hungary
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Aldi was fined EUR 253,000 by the Hungarian data protection authority for storing customers' birth dates when they bought alcohol. This practice was meant to help cashiers but was seen as unnecessary data collection. Aldi's failure to explain the legal reason for this data use highlights the importance of clear data practices.

What happened

Aldi stored customers' birth dates in their checkout system when they purchased alcohol.

Who was affected

Customers buying alcoholic beverages at Aldi stores in Hungary.

What the authority found

The Hungarian authority decided that Aldi's collection of birth dates was excessive and lacked a clear legal basis.

Why this matters

This case shows that companies must justify any personal data they collect, even if it's for operational convenience. Businesses should ensure they only gather necessary data and can explain their reasons clearly.

GDPR Articles Cited

AI-verified

Art. 5(1)(c) GDPR
Art. 6(1) GDPR
View original scraped data
Unknown

Original data from scraper before AI verification against source document.

Source verified 6 March 2026
articles corrected
amount discrepancy
Full Legal Summary
Detailed

The Hungarian DPA imposed a fine of EUR 253,000 on the supermarket chain Aldi. Aldi had entered and stored the date of birth of many customers in the checkout system when purchasing alcoholic beverages. This procedure was introduced to make the cashiers' work easier, as the software could quickly calculate whether the person was over 18 or not, but was considered excessive by the DPA. Furthermore, ALDI did not answered any questions about the legal basis for this processing.

Related Enforcement Actions (0)

No other enforcement actions found for Aldi in HU

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

12 April 2023

Authority

Nemzeti Adatvédelmi és Információszabadság Hatóság

Fine Amount

€253,000

Enforcement Tracker ID

ETid-1804

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Aldi - Hungary (2023). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: