Enforcing jurisdiction
Hungary · Geography does not establish applicable law.
Confirmed applicable legislation

Debt collector – €1,560 Fine (Hungary, 2019)

€1,560Nemzeti Adatvédelmi és Információszabadság Hatóság20 February 2019Hungary
final
Fine

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

A debt collector in Hungary was fined for not properly responding to a person's request to access and delete their data. The collector initially refused to identify the person and later denied the deletion request without clear communication. This case shows that companies must be transparent and responsive to data requests from individuals.

What happened

The debt collector refused to provide information and delete personal data after a request was made by an individual.

Who was affected

A person whose data was held by the debt collector and who requested access and deletion of that data.

What the authority found

The Nemzeti Adatvédelmi és Információszabadság Hatóság found that the debt collector violated transparency rules by not properly informing the individual about their data policies.

Why this matters

This case highlights the need for businesses to clearly communicate their data handling practices and respond promptly to requests from individuals. It sets a precedent for accountability in data management.

Recorded legal citations
Automatically processed
Art. 5(1)(a) GDPR
Art. 5(1)(c) GDPR
View original scraped data
Art. 5(1) a) GDPR
Art. 5(1) c) GDPR

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Linked-source text retrieved.

Automated check recorded — 16 March 2026.

No issues were reported by that automated check.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

A data subject requested information about and erasure of the data processed, which the debt collector refused stating that it could not identify the subject. For identification purposes he requested place of birth, mother’s maiden name and further details from the data subject. After the controller succeeded to identify the data subjects he refused to comply with the deletion request, arguing he is legally obliged to retain backup copies according to the Accountancy Act and internal policies. Since he did not properly inform about these policies, the NAIH held the controller breached the principle of transparency. The fine constitutes 0.0025% of the annual profit of the controller.

Related Enforcement Actions (0)

No other enforcement actions found for Debt collector in HU

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

20 February 2019

Authority

Nemzeti Adatvédelmi és Információszabadság Hatóság

Fine Amount

€1,560

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Debt collector - Hungary (2019). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: