News service

€5,200

Insufficient legal basis for data processing

決定日

2022年11月15日

権威

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)

セクター

Media, Telecoms and Broadcasting

国名

法律

GDPR

ステータス

FINAL

説明

The Hungarian DPA imposed a fine of EUR 5,200 on a news service. A customer had complained to the DPA about subscribing to a newsletter to receive a daily news digest, however, they had also received direct marketing messages. During its investigation, the DPA found that the processing of the data subjects' personal data for direct marketing purposes was unlawful. As the controller had not sufficiently informed the data subjects of their rights, the DPA found that the data subjects' consent to receive the newsletter was not valid as a legal basis for the processing of the data for marketing purposes due to the insufficient information provided.