Enforcing jurisdiction
Hungary · Geography does not establish applicable law.
Confirmed applicable legislation
Privacy topics

Hungarian political party – €34,375 Fine (Hungary, 2019)

€34,375Nemzeti Adatvédelmi és Információszabadság Hatóság5 April 2019Hungary
final
Fine

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

A Hungarian political party was fined for not notifying authorities and individuals about a data breach. This is significant because it shows that organizations must act quickly and transparently when a data breach occurs. Other companies should learn to have a solid breach response plan.

What happened

The political party failed to notify the authorities and affected individuals about a data breach.

Who was affected

More than 6,000 individuals whose data was exposed in the breach were affected.

What the authority found

The authority found that the party did not comply with the requirement to document and report the data breach.

Why this matters

This ruling sets a precedent for how organizations must handle data breaches. Companies need to ensure they have procedures in place to report breaches promptly.

Recorded legal citations
Automatically processed
Art. 33(1) GDPR
Art. 33(5) GDPR
Art. 34(1) GDPR
View original scraped data
Art. 33(1) GDPR
Art. 33(5) GDPR
Art. 34(1) GDPR

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Linked-source text retrieved.

Automated check recorded — 12 March 2026.

No issues were reported by that automated check.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

NAIH imposed a fine of HUF 11,000,000 (EUR 34,375) on an undisclosed Hungarian political party for failing to notify the NAIH and relevant individuals about a data breach, and failing to document the breach according to GDPR Article 33.5. As mandated by law, the fine was based on 4% of the party's annual turnover and 2.65 % of its anticipated turnover for the coming year. The breach was the result of a cyber attack by an anonymous hacker who accessed and disclosed information on the vulnerability of the organisation’s system – a database of more than 6,000 individuals – and the command used for the attack. The system was vulnerable to attack because of a redirection problem with the organisation's webpage. After the attacker published the command, even people with low IT knowledge were able to retrieve information from the database.

Related Enforcement Actions (0)

No other enforcement actions found for Hungarian political party in HU

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

5 April 2019

Authority

Nemzeti Adatvédelmi és Információszabadság Hatóság

Fine Amount

€34,375

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Hungarian political party - Hungary (2019). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: