Unknown – €9,400 Fine (Hungary, 2019)

€9,400Nemzeti Adatvédelmi és Információszabadság Hatóság17 April 2019Hungary
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

An unknown company in Hungary was fined for using the wrong legal basis to process personal data related to claim assignments. The Hungarian authority found this practice violated GDPR rules. This case emphasizes the need for companies to choose the correct legal basis for data processing.

What happened

A company used an incorrect legal basis for processing personal data for claim assignments.

Who was affected

Individuals whose personal data was processed under an incorrect legal basis.

What the authority found

The Hungarian authority determined that the company violated GDPR by using an inappropriate legal basis for data processing.

Why this matters

This ruling serves as a warning to businesses to carefully evaluate and select the appropriate legal basis for processing personal data. It highlights the importance of understanding GDPR requirements to avoid costly fines.

GDPR Articles Cited
Automatically processed
Art. 6(GDPR)
Art. 5(1)(a) GDPR
View original scraped data
Art. 5(1) a) GDPR
Art. 6(GDPR)

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Linked-source text retrieved.

Review needed — 14 March 2026.

Processing notes: articles corrected, entity split needed.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Hungary enforcementNemzeti Adatvédelmi és Információszabadság Hatóság actionsAll Unknown actions
Full Legal Summary
Detailed

A data controller used a, in the point of view of NAIH, wrong legal basis for processing of personal data (Art. 6.1.b) for the assignment of claims.

Related Enforcement Actions (7)

Other enforcement actions involving Unknown in HU

Fine
Dec 2018· Nemzeti Adatvédelmi és Információszabadság Hatóság

The fine was imposed for (i) not providing a data subject with CCTV recordings, (ii) not retaining recordings for further use by the data subject, and...

€3K
Fine
Apr 2019· Nemzeti Adatvédelmi és Információszabadság Hatóság

The data controller did not fulfil the data subject's access request.

€2K
Current
Apr 2019

Fine

€9K

Fine
Jun 2019· Nemzeti Adatvédelmi és Információszabadság Hatóság

The data controller did not fulfil its data breach notification obligations when a flash memory with personal data was lost.

€15K
Fine
Jun 2019· Nemzeti Adatvédelmi és Információszabadság Hatóság

The individual requested the deletion of his contact data (including his telephone number), however the controller further processed his contact data ...

€3K
Fine
Nov 2020· Nemzeti Adatvédelmi és Információszabadság Hatóság

The data subject had subscribed to a newsletter of the controller. After altering his/her e-mail address, he/she continued to receive the newsletter v...

€28
Fine
Dec 2020· Nemzeti Adatvédelmi és Információszabadság Hatóság

The Hungarian DPA (NAIH) imposed a fine of HUF 700,000 (EUR 1,940) against a construction company. The controller had installed a video surveillance s...

€2K
Fine
Dec 2020· Nemzeti Adatvédelmi és Információszabadság Hatóság

The Hungarian DPA (NAIH) imposed a fine of EUR 97,150 against a credit institute. Two parents contacted the Hungarian DPA regarding the processing of ...

€97K

Details

Fine Date

17 April 2019

Authority

Nemzeti Adatvédelmi és Információszabadság Hatóság

Fine Amount

€9,400

Sources

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Unknown - Hungary (2019). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: