NAIH (Hungary) - NAIH-450-7-2026
Hungary's DPA fines an online store operator €41,500 for GDPR transparency violations.
Hungary's National Data Protection Authority (NAIH) has fined an online store operator HUF 15,000,000 (€41,500) for multiple GDPR violations. The violations included a lack of transparency, failure to provide concise and intelligible information on data processing purposes and legal bases, and inadequate information regarding data transfers to third countries. The company was ordered to amend its website's data processing notices and terms and conditions.
AI summary of the linked source. Not reviewed by an editor. How this works
Run NAIH?
Get an email when a new story names NAIH, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonAn online store operator in Hungary was fined HUF 15,000,000 (€41,500) by the National Data Protection Authority (NAIH) for failing to provide clear, concise, and intelligible information about its data processing activities, including inadequate disclosures around third-country data transfers. Under GDPR Articles 13 and 14, organizations are legally obligated to inform individuals about the purposes and legal bases for processing their personal data in a transparent manner. This case highlights that GDPR compliance is not just about technical safeguards — it equally demands clear, accessible, and accurate privacy documentation. Failure to maintain compliant privacy notices exposes organizations to significant financial penalties and reputational harm, even without a data breach occurring.
What helps against this
How we list vendors- Compliance automation (GRC)
Evidence for NIS2, DORA and ISO 27001 is collected continuously, not in a rush before the audit.