Budapesti Műszaki és Gazdaságtudományi Egyetem (Budapest University of Technology and Economics)
€22,200
Insufficient legal basis for data processing
Datum der Entscheidung
10. Dezember 2020
Behörde
Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)
HU
Sektor
Public Sector and Education
Land
HU
Recht
GDPRStatus
FINALBeschreibung
The Hungarian DPA (NAIH) imposed a fine of EUR 22,200 against the Budapest University of Technology and Economics. NAIH finds that the controller unlawfully processed personal data in the course of audits of applications for social scholarships. Among other things, data was processed without a legal basis and in some cases particularly sensitive data was processed, although this was not necessary for the evaluation of the scholarship applications.
Juristische Zitate
Art. 5 (1)Art. 6 (1)Art. 9 (2)Art. 12Art. 13
Probleme und Verstöße
Insufficient legal basis for data processing