Search Privacy Fines
Browse and filter privacy enforcement fines worldwide.
80 fines found
Total: $2.7M
| Date | Company | Fine | Regulation | Authority | Country | Type | Summary |
|---|---|---|---|---|---|---|---|
| 2022-02-08 | Budapest Bank Zrt. | €634K | GDPR | Hungarian National Authority for Data Protection and the Freedom of Information | Hungary | Failure to comply with data processing principles | --Articles: Art. 5 (1) a), b) GDPR, Art. 6 (1), (4) GDPR, Art. 12 (1) GDPR, Art. 13 GDPR, Art. 14 GDPR, Art. 21 (1), (2) GDPR, Art. 24 (1) GDPR, Art. 25 (1), (2) GDPR |
| 2020-06-12 | Digi Távközlési Szolgáltató Kft. | €288K | GDPR | Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) | Hungary | Failure to implement sufficient measures to ensure information security | --Articles: Art. 5 (1) b), (e) GDPR, Art. 32 (1), (2) GDPR |
| 2023-04-12 | Aldi | €253K | GDPR | Hungarian National Authority for Data Protection and the Freedom of Information | Hungary | Unknown | --Articles: Unknown |
| 2022-08-11 | AMPLIFION Hungary Trade and Service Provider LLC | €197K | GDPR | Hungarian National Authority for Data Protection and the Freedom of Information | Hungary | Non-compliance with lawful basis for data processing | --Articles: Art. 5 (1) b) GDPR, Art. 6 (1) GDPR, Art. 12 (1) GDPR, Art. 14 GDPR |
| 2020-12-16 | Unknown | €97K | GDPR | Hungarian National Authority for Data Protection and the Freedom of Information | Hungary | Non-compliance with lawful basis for data processing | --Articles: Art. 5 (1) c) GDPR, Art. 6 (1) GDPR, Art. 9 (1) GDPR, Art. 12 GDPR |
| 2019-05-23 | Organizer of SZIGET festival and VOLT festival | €92K | GDPR | Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) | Hungary | Non-compliance with lawful basis for data processing and information obligation non-compliance | --Articles: Art. 6 GDPR, Art. 5 (1) b) GDPR, Art. 13 GDPR |
| 2019-05-23 | Organizer of SZIGET festival and VOLT festival | €92K | GDPR | Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) | Hungary | Non-compliance with lawful basis for data processing and information obligation non-compliance | The subjects had not been informed about the data processing, and the data contr...The subjects had not been informed about the data processing, and the data controllers had not complied with the principle of purpose limitation. Articles: Art. 6 GDPR, Art. 5 (1) b) GDPR, Art. 13 GDPR |
| 2022-01-01 | Beauty salon | €81K | GDPR | Hungarian National Authority for Data Protection and the Freedom of Information | Hungary | Unknown | --Articles: Unknown |
| 2022-09-12 | Coin Dealer | €81K | GDPR | Hungarian National Authority for Data Protection and the Freedom of Information | Hungary | Failure to comply with data processing principles | --Articles: Art. 5 (1) a), b) GDPR, Art. 6 (1) GDPR, Art. 7 (2) GDPR, Art. 12 (1) GDPR, Art. 13 GDPR |
| 2023-02-06 | I&S Limited Kft | €81K | GDPR | Hungarian National Authority for Data Protection and the Freedom of Information | Hungary | Failure to comply with data processing principles | --Articles: Art. 5 (1) a), b) GDPR, Art. 6 (1) GDPR, Art. 9 (2) GDPR, Art. 13 (1), (2) GDPR, Art. 24 GDPR, Art. 25 GDPR |
| 2022-10-05 | Bank | €73K | GDPR | Hungarian National Authority for Data Protection and the Freedom of Information | Hungary | Failure to comply with data processing principles | --Articles: Art. 5 (2) GDPR, Art. 6 (1) GDPR, Art. 12 (1) GDPR |
| 2020-12-16 | Robinson Tours Kft. | €55K | GDPR | Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) | Hungary | Non-compliance with lawful basis for data processing | --Articles: Art. 25 (1), (2) GDPR, Art. 32 (1) b) GDPR, Art. 34 (1) GDPR |
| 2020-10-23 | Deichmann KFT | €55K | GDPR | Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) | Hungary | Non-compliance with subjects' rights protection safeguards | --Articles: Art. 12 GDPR, Art. 15 GDPR, Art. 18 (1) c) GDPR, Art. 25 GDPR |
| 2019-04-05 | Political Party - Undisclosed | €34K | GDPR | Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) | Hungary | Information obligation non-compliance | The political party did not notify the NAIH about a data breach. Moreover, it di...The political party did not notify the NAIH about a data breach. Moreover, it didn’t document the data breach as per GDPR article 33.5. Therefore, the political party received a fine of HUF 11.000.000 (equivalent to 34.375 EUR). The hacker behind the breach had used a redirection attack on the official website of the political party and disclosed information about more than 6.000 people. Articles: Art. 33 (1) GDPR, Art. 33 (5) GDPR, Art. 34 (1) GDPR |
| 2019-04-05 | Political Party - Undisclosed | €34K | GDPR | Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) | Hungary | Information obligation non-compliance | --Articles: Art. 33 (1) GDPR, Art. 33 (5) GDPR, Art. 34 (1) GDPR |
| 2021-06-18 | Magyar Telekom Nyrt. | €28K | GDPR | Hungarian National Authority for Data Protection and the Freedom of Information | Hungary | Non-compliance with lawful basis for data processing | --Articles: Art. 5 (1) d) GDPR, Art. 6 (1) GDPR, Art. 12 (2), (3), (4) GDPR, Art. 17 (1) GDPR, Art. 25 GDPR |
| 2022-09-26 | TV2 Media Csoport Zrt. | €27K | GDPR | Hungarian National Authority for Data Protection and the Freedom of Information | Hungary | Failure to comply with data processing principles | --Articles: Art. 5 (1) a), b) GDPR, Art. 6 (1) GDPR, Art. 12 (1) GDPR, Art. 13 GDPR |
| 2020-12-10 | Budapesti Műszaki és Gazdaságtudományi Egyetem (Budapest University of Technology and Economics) | €22K | GDPR | Hungarian National Authority for Data Protection and the Freedom of Information | Hungary | Multiple | --Articles: Art. 5 (1) a), b), c) GDPR, Art. 6 (1) GDPR, Art. 9 (2) GDPR, Art. 12 GDPR, Art. 13 GDPR |
| 2019-06-25 | Budapest Police Command | €15K | GDPR | Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) | Hungary | Information obligation non-compliance | --Articles: Art. 33 GDPR |
| 2019-06-25 | Budapest Police Command | €15K | GDPR | Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) | Hungary | Information obligation non-compliance | The data controllers didn’t exert sufficient rigorousness when handling personal...The data controllers didn’t exert sufficient rigorousness when handling personal client data, which led to the displacement of a flash memory stick with personal data. Articles: Art. 33 GDPR |
| 2019-10-01 | Town of Kerepes | €15K | GDPR | Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) | Hungary | Non-compliance with lawful basis for data processing | --Articles: Art. 6 (1) GDPR |
| 2019-10-01 | Town of Kerepes | €15K | GDPR | Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) | Hungary | Non-compliance with lawful basis for data processing | The Hungarian National Authority for Data Protection and the Freedom of Informat...The Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) concluded that the local authority of the city of Kerepes didn’t follow GDPR regulations when it installed a security camera. The Authority explained that the processing of the data was not in accordance with provisions of the GDPR. Articles: Art. 6 (1) GDPR |
| 2021-10-27 | Car Importer | €14K | GDPR | Hungarian National Authority for Data Protection and the Freedom of Information | Hungary | Non-compliance with lawful basis for data processing | --Articles: Art. 5 (1), (2) GDPR, Art. 6 (1) GDPR, Art. 12 (1) GDPR, Art. 13 GDPR |
| 2022-03-02 | Company | €14K | GDPR | Hungarian National Authority for Data Protection and the Freedom of Information | Hungary | Failure to comply with data processing principles | --Articles: Art. 5 (2) GDPR, Art. 6 (1) GDPR, Art. 12 (2) GDPR, Art. 17 (1) b) GDPR |
| 2023-04-04 | Company | €13K | GDPR | Hungarian National Authority for Data Protection and the Freedom of Information | Hungary | Insufficient fulfilment of data subjects rights | --Articles: Art. 12 GDPR, Art. 13 GDPR |