News service

€5,200

Insufficient legal basis for data processing

Decision Date

15 de novembro de 2022

Authority

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)

HU

Sector

Media, Telecoms and Broadcasting

Country

HU

Law

GDPR

Status

FINAL

Description

The Hungarian DPA imposed a fine of EUR 5,200 on a news service. A customer had complained to the DPA about subscribing to a newsletter to receive a daily news digest, however, they had also received direct marketing messages. During its investigation, the DPA found that the processing of the data subjects' personal data for direct marketing purposes was unlawful. As the controller had not sufficiently informed the data subjects of their rights, the DPA found that the data subjects' consent to receive the newsletter was not valid as a legal basis for the processing of the data for marketing purposes due to the insufficient information provided.

Legal Citations

Art. 6 (1)Art. 7 (2)Art. 12

Issues & Violations

Insufficient legal basis for data processing

Stay Updated on Privacy Enforcement

We respect your privacy. One email per month, no spam, unsubscribe anytime.