Company – €570 Fine (Hungary, 2021)

€570Nemzeti Adatvédelmi és Információszabadság Hatóság27 April 2021Hungary
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

A Hungarian company was fined EUR 570 for recording a phone call without informing the caller or getting consent. The recording was used to fire the caller, which violated privacy rules. This case shows the importance of transparency and obtaining consent before recording conversations.

What happened

A company recorded a phone call without informing the caller or obtaining consent, then shared it with the caller's employer.

Who was affected

The person whose phone call was recorded without their knowledge and used by their employer.

What the authority found

The Hungarian authority fined the company for recording a call without a legal basis and failing to inform the caller, violating GDPR.

Why this matters

This case underscores the need for businesses to be transparent and obtain consent when recording conversations. It serves as a warning that improper handling of personal data can lead to fines and legal issues.

GDPR Articles Cited

Art. 6 GDPR
Art. 13 GDPR
Art. 5(1)(a) GDPR
Full Legal Summary
Detailed

The Hungarian DPA (NAIH) has imposed a fine of EUR 570 on a company. In the course of his professional activities, a data subject had made a telephone call to a company on September 23, 2019. The company had recorded the conversation without informing the data subject or obtaining his consent, and subsequently made it available to the company where the data subject was employed (the controller). The controller then terminated the employment relationship because the recorded telephone conversation apparently did not meet the controller's service and professional standards. The DPA finds that the controller not only processed the data subject's data without a legal basis, but also breached its accountability obligations by failing to demonstrate the lawfulness of the processing. In addition, the controller violated its obligation to provide information pursuant to Art. 13 GDPR.

Details

Fine Date

27 April 2021

Authority

Nemzeti Adatvédelmi és Információszabadság Hatóság

Fine Amount

€570

Enforcement Tracker ID

ETid-693

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Company - Hungary (2021). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: