[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fqMkhvbcjJpx8K1_GB2PYT3O67HWWOdyU7tnb9v0tDGc":3},{"article":4,"iocs":43,"watch_terms":44,"solutions":45,"lesson":65},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":20,"category":21,"article_tags":25},"0f437a1c-d7e1-4ac7-b76f-7a0fe41aea86","NAIH (Hungary) - NAIH-450-7-2026","naih-hungary-naih-450-7-2026-1e7c44","Link to document added ← Older revision Revision as of 08:43, 5 August 2026 Line 12: Line 12: |Original_Source_Name_1=NAIH |Original_Source_Name_1=NAIH |Original_Source_Link_1=https:\u002F\u002Fnaih.hu\u002Fhatarozatok-vegzesek |Original_Source_Link_1=https:\u002F\u002Fnaih.hu\u002Fhatarozatok-vegzesek?download=1559:tajekoztatasi-hianyossagok-webaruhaz-adatkezelese-soran |Original_Source_Language_1=Hungarian |Original_Source_Language_1=Hungarian |Original_Source_Language__Code_1=HU |Original_Source_Language__Code_1=HU","Hungary's National Data Protection Authority (NAIH) has fined an online store operator HUF 15,000,000 (€41,500) for multiple GDPR violations. The investigation, spanning from January 2020 to November 2025, found the company guilty of failing to provide clear, transparent, and intelligible information to customers regarding data processing purposes, legal bases, and retention periods. The authority also cited conflicting information on data transfers to third countries.","Hungary's NAIH fines an online store operator HUF 15M for GDPR transparency violations.","https:\u002F\u002Fgdprhub.eu\u002Findex.php?title=NAIH_(Hungary)_-_NAIH-450-7-2026&diff=52625&oldid=52624","https:\u002F\u002Fgdprhub.eu\u002Fimages\u002F8\u002F85\u002FLogoHU.jpg","2026-08-05T08:43:20+00:00","2026-08-05T10:00:15.425041+00:00",7,[17],{"name":18,"type":19},"NAIH","vendor","c5c77cdb-f7d7-4990-9436-c81dcbff1163",{"id":20,"icon":22,"name":23,"slug":24},null,"Policy","policy",[26,31,36,38],{"category":27},{"id":28,"icon":22,"name":29,"slug":30},"3f0f8451-91df-4b6c-9a73-ef3b2509b7f1","GDPR","gdpr",{"category":32},{"id":33,"icon":22,"name":34,"slug":35},"53f9c4b6-8bc6-4964-9169-d09e5cd41d72","Compliance","compliance",{"category":37},{"id":20,"icon":22,"name":23,"slug":24},{"category":39},{"id":40,"icon":22,"name":41,"slug":42},"d95477d7-eb04-4fad-a2dc-be1428040ce7","Privacy Fines","privacy-fines",[],[18],{"controls":46,"vendors":64},[47],{"slug":48,"name":49,"problem":50,"products":51},"compliance-automation","Compliance automation (GRC)","Evidence for NIS2, DORA and ISO 27001 is collected continuously, not in a rush before the audit.",[52,58],{"vendor_slug":53,"vendor_name":54,"vendor_logo":55,"product_slug":53,"product_name":54,"url":56,"description":57},"vanta","Vanta","\u002Fvendor-logos\u002Fvanta.png","https:\u002F\u002Fwww.vanta.com\u002F","Automated evidence collection and continuous monitoring for ISO 27001, SOC 2, NIS2 and other frameworks.",{"vendor_slug":59,"vendor_name":60,"vendor_logo":61,"product_slug":59,"product_name":60,"url":62,"description":63},"drata","Drata","\u002Fvendor-logos\u002Fdrata.png","https:\u002F\u002Fdrata.com\u002F","Continuous control monitoring and audit readiness across security frameworks.",[],{"slug":66,"title":67,"body":68,"framework_refs":69,"framework_notes":80},"hungarian-retailer-fined-41500-for-opaque-gdpr-privacy-notices","Hungarian Retailer Fined €41,500 for Opaque GDPR Privacy Notices","An Hungarian online store accumulated GDPR violations over nearly six years by failing to clearly communicate to customers how their personal data was collected, processed, and retained. The company also provided conflicting information about transfers of personal data to third countries, compounding the transparency failures. This case illustrates that privacy compliance is not a one-time checkbox but requires ongoing governance, review, and accurate documentation. Regulators will look back across extended timeframes, meaning even legacy policy failures carry significant financial and reputational risk.",[70,71,72,73,74,75,76,77,78,79],"GDPR Article 5(1)(a) – Lawfulness, fairness and transparency","GDPR Article 13 – Information to be provided where personal data are collected from the data subject","GDPR Article 14 – Information to be provided where personal data have not been obtained from the data subject","GDPR Article 30 – Records of processing activities (RoPA)","GDPR Article 44-49 – Transfers of personal data to third countries","NIST Privacy Framework PR.PO-P1 – Policies, processes, and procedures for managing data processing","NIST SP 800-53 PT-2 – Authority to Process Personally Identifiable Information","CIS Control 3 – Data Protection","ISO\u002FIEC 27701:2019 – Privacy Information Management (PIMS)","ITIL Service Design – Information Security Policy Management",{}]