Unnamed financial institution – €3,200 Fine (Hungary, 2019)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A Hungarian financial institution was fined €3,200 for refusing to delete a customer's phone number. The company claimed it needed the number for debt collection, but the authority disagreed. This case stresses the importance of respecting customer requests for data deletion.
What happened
A financial institution unlawfully refused a customer's request to delete their phone number, claiming it was needed for debt collection.
Who was affected
A customer of the unnamed financial institution who requested the deletion of their phone number.
What the authority found
The authority found the financial institution's retention of the phone number violated GDPR's principles of data minimization and purpose limitation.
Why this matters
This ruling reinforces the need for companies to honor customer requests for data deletion unless they have a strong legal justification. It serves as a reminder to businesses to evaluate their data retention practices.
GDPR Articles Cited
The fine was imposed in relation to a data subject's request for data correction and erasure. NAIH levied a fine against an unnamed financial institution for unlawfully rejecting a customer’s request to have his phone number erased after arguing that it was in the company's legitimate interest to process this data in order to enforce a debt claim against the customer. In its decision, the NAIH emphasised that the customer’s phone number is not necessary for the purpose of debt collection because the creditor can also communicate with the debtor by post. Consequently, keeping the phone number of the debtor was against the principles of data minimisation and purpose limitation. As per the law, the assessed fine was based on 0.025% of the company's annual net revenue.
Related Enforcement Actions (0)
No other enforcement actions found for Unnamed financial institution in HU
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
4 March 2019
Authority
Nemzeti Adatvédelmi és Információszabadság Hatóság
Fine Amount
€3,200
Enforcement Tracker ID
ETid-37
About this data
Cite as: Cookie Fines. Unnamed financial institution - Hungary (2019). Retrieved from cookiefines.eu
Last updated: