- Enforcing jurisdiction
- Hungary · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Company – €570 Fine (Hungary, 2021)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
A company was fined 570 euros for recording a phone call without telling the person involved. This is important because it shows that companies must inform users when they are recording conversations. It stresses the need for transparency in data handling.
What happened
A company recorded a phone call without informing the caller and shared it with another company.
Who was affected
A person whose phone call was recorded and later used by their employer to terminate their job.
What the authority found
The Hungarian data protection authority found that the company processed the person's data without a legal basis and failed to provide necessary information.
Why this matters
This case serves as a reminder for businesses to be transparent about data collection practices and to obtain consent before recording conversations.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Review needed — 17 March 2026.
Processing notes: articles corrected, amount discrepancy, entity split needed.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Hungarian DPA (NAIH) has imposed a fine of EUR 570 on a company. In the course of his professional activities, a data subject had made a telephone call to a company on September 23, 2019. The company had recorded the conversation without informing the data subject or obtaining his consent, and subsequently made it available to the company where the data subject was employed (the controller). The controller then terminated the employment relationship because the recorded telephone conversation apparently did not meet the controller's service and professional standards. The DPA finds that the controller not only processed the data subject's data without a legal basis, but also breached its accountability obligations by failing to demonstrate the lawfulness of the processing. In addition, the controller violated its obligation to provide information pursuant to Art. 13 GDPR.
Related Enforcement Actions (1)
Other enforcement actions involving Company in HU
Details
Fine Date
27 April 2021
Authority
Nemzeti Adatvédelmi és Információszabadság Hatóság
Fine Amount
€570
About this data
Cite as: Cookie Fines. Company - Hungary (2021). Retrieved from cookiefines.eu
Last updated: