Sanction RGPD Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) — Digi Távközlési Szolgáltató Kft. ('Digi') (electronic communication service provider) : 288 k€ (2020)
- Autorité de contrôle
- Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)
- Pays
- Hongrie
- Entreprise / secteur
- Digi Távközlési Szolgáltató Kft. ('Digi') (electronic communication service provider)
- Montant de l'amende
- 288 k€
- Date de la décision
- 12 juin 2020
- Fondement juridique
- Art. 5 (1) b), (e), Art. 32 (1), (2)
- Manquement
- Mesures techniques et organisationnelles insuffisantes
Résumé des faits
The company had infringed the principles of purpose limitation and storage restriction because its database contained a large amount of customer data which were no longer relevant for the actual purpose of collection and for which no retention period had been set. Furthermore, the NAIH pointed out that the defendant had not taken proportionate measures to reduce the risks in the area of data management and data security, arguing, inter alia, that it had not used encryption mechanisms.
Décision officielle
Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)