News service
Insufficient legal basis for data processing
Fecha de la decisión
15 de noviembre de 2022
Autoridad
Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)
HU
Sector
Media, Telecoms and Broadcasting
País
HU
Ley
GDPREstado
FINALDescripción
The Hungarian DPA imposed a fine of EUR 5,200 on a news service. A customer had complained to the DPA about subscribing to a newsletter to receive a daily news digest, however, they had also received direct marketing messages. During its investigation, the DPA found that the processing of the data subjects' personal data for direct marketing purposes was unlawful. As the controller had not sufficiently informed the data subjects of their rights, the DPA found that the data subjects' consent to receive the newsletter was not valid as a legal basis for the processing of the data for marketing purposes due to the insufficient information provided.