Unknown company

€2K($2K USD)final

Date Issued

2019-02-20

Regulation

Authority

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)

Country

Hungary

Violation Type

Failure to comply with data processing principles

Currency

EUR

Violation Summary

A data subject requested the erasure of the data processed by a debt collector who requested further personal information to identify the subject. After being provided with said information (place of birth, mother’s maiden name, etc), the debt collector stated that he could not comply with the request. The debt collector invoked the Accountancy Act and other internal policies for why he was obliged to retain backup data copies. The NAIH issued a fine because the data controller had not informed the subject about these policies.

Articles Violated

Art. 5 (1) a) GDPRArt. 5 (1) c) GDPR

Other Fines for Unknown company

DateRegulationAmount (USD)Type
2022-11-29GDPR$3,240Non-compliance with lawful basis for data processing
2022-10-24GDPR$259Failure to comply with data processing principles
2022-10-09GDPR$864Non-compliance with lawful basis for data processing
2022-09-20GDPR$567,000Non-cooperation with Data Protection Authority
2022-03-15GDPR$10,476Non-compliance with lawful basis for data processing
2021-11-22GDPR$3,240Non-compliance with subjects' rights protection safeguards
2021-11-12GDPR$1,620Non-compliance with subjects' rights protection safeguards
2020-05-22GDPR$13,500Failure to comply with data processing principles
2020-03-19GDPR$6,264Non-compliance with lawful basis for data processing
2019-12-11GDPR$1,544Non-compliance with lawful basis for data processing