Enforcing jurisdiction
Hungary · Geography does not establish applicable law.
Confirmed applicable legislation
No confirmed legal basis recorded.
Privacy topics

Aldi – €253,000 Fine (Hungary, 2023)

€253,000Nemzeti Adatvédelmi és Információszabadság Hatóság12 April 2023Hungary
final
Fine

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

The Hungarian data protection authority fined Aldi €253,000 for improperly collecting customers' birth dates at checkout. The authority found that this practice was excessive and lacked a clear legal basis. This case highlights the need for businesses to ensure their data collection practices are necessary and compliant with privacy laws.

What happened

Aldi was fined for collecting and storing customers' birth dates when purchasing alcohol without a valid legal basis.

Who was affected

Customers who purchased alcoholic beverages at Aldi stores and had their birth dates collected.

What the authority found

The Hungarian data protection authority ruled that Aldi's data collection practice was excessive and did not comply with privacy regulations.

Why this matters

This fine serves as a warning to businesses about the importance of having a valid legal basis for data collection and the potential consequences of excessive data practices.

Source checks

Linked-source text retrieved.

Review needed — 6 March 2026.

Processing notes: articles corrected, amount discrepancy.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The Hungarian DPA imposed a fine of EUR 253,000 on the supermarket chain Aldi. Aldi had entered and stored the date of birth of many customers in the checkout system when purchasing alcoholic beverages. This procedure was introduced to make the cashiers' work easier, as the software could quickly calculate whether the person was over 18 or not, but was considered excessive by the DPA. Furthermore, ALDI did not answered any questions about the legal basis for this processing.

Related Enforcement Actions (0)

No other enforcement actions found for Aldi in HU

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

12 April 2023

Authority

Nemzeti Adatvédelmi és Információszabadság Hatóság

Fine Amount

€253,000

Enforcement Tracker ID

ETid-1804

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Aldi - Hungary (2023). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: