Sanction RGPD Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) — Unknown : 97 k€ (2020)
- Autorité de contrôle
- Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)
- Pays
- Hongrie
- Entreprise / secteur
- Unknown
- Montant de l'amende
- 97 k€
- Date de la décision
- 16 décembre 2020
- Fondement juridique
- Art. 5 (1) c), Art. 6 (1), Art. 9 (1), Art. 12
- Manquement
- Base légale insuffisante pour le traitement
Résumé des faits
The Hungarian DPA (NAIH) imposed a fine of EUR 97,150 against a credit institute. Two parents contacted the Hungarian DPA regarding the processing of personal data by their credit institute related to a 'childbirth incentive loan'. The couple requested a suspension of repayment, for which they had to prove that the fetus is at least 12 weeks old. To certify this fact, the controller copied their entire pregnancy booklet. The NAIH found that the controller violated the principle of data minimization by copying the entire pregnancy booklet, which contained excessive amounts of health data, even though this was not necessary regarding the purpose of the processing. For this reason, the NAIH ultimately concluded that the controller had no legal basis for such extensive data processing
Décision officielle
Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)