[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ftazXhrMZoXmkAX9-P_yw8rHC65DMnXmG6TIOga2rvNc":3},{"article":4,"iocs":41,"watch_terms":42,"solutions":43,"lesson":63},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":20,"category":21,"article_tags":25},"0aa1486f-b625-4da7-b6b3-46b3c524fc05","NAIH (Hungary) - NAIH-450-7-2026","naih-hungary-naih-450-7-2026-6099b2","Typo ← Older revision Revision as of 08:15, 5 August 2026 Line 92: Line 92: }} }} The DPA fined the operator of an online store HUF 15,000,000 (€41,500) for not providing its customers concise, transparent, and intelligible information on the purpose, legal basis, and duration of processing and data transfers to third countries. The DPA fined the operator of an online store HUF 15,000,000 (€41,500) for not providing its customers concise, transparent, and intelligible information on the purposes, legal basis, and duration of processing and data transfers to third countries. == English Summary == == English Summary ==","Hungary's National Data Protection Authority (NAIH) has fined an online store operator HUF 15,000,000 (€41,500) for multiple GDPR violations. The violations included a lack of transparency, failure to provide concise and intelligible information on data processing purposes and legal bases, and inadequate information regarding data transfers to third countries. The company was ordered to amend its website's data processing notices and terms and conditions.","Hungary's DPA fines an online store operator €41,500 for GDPR transparency violations.","https:\u002F\u002Fgdprhub.eu\u002Findex.php?title=NAIH_(Hungary)_-_NAIH-450-7-2026&diff=52621&oldid=52612","https:\u002F\u002Fgdprhub.eu\u002Fimages\u002F8\u002F85\u002FLogoHU.jpg","2026-08-05T08:15:25+00:00","2026-08-05T10:00:15.425041+00:00",7,[17],{"name":18,"type":19},"NAIH","vendor","c5c77cdb-f7d7-4990-9436-c81dcbff1163",{"id":20,"icon":22,"name":23,"slug":24},null,"Policy","policy",[26,31,36],{"category":27},{"id":28,"icon":22,"name":29,"slug":30},"3f0f8451-91df-4b6c-9a73-ef3b2509b7f1","GDPR","gdpr",{"category":32},{"id":33,"icon":22,"name":34,"slug":35},"53f9c4b6-8bc6-4964-9169-d09e5cd41d72","Compliance","compliance",{"category":37},{"id":38,"icon":22,"name":39,"slug":40},"d95477d7-eb04-4fad-a2dc-be1428040ce7","Privacy Fines","privacy-fines",[],[18],{"controls":44,"vendors":62},[45],{"slug":46,"name":47,"problem":48,"products":49},"compliance-automation","Compliance automation (GRC)","Evidence for NIS2, DORA and ISO 27001 is collected continuously, not in a rush before the audit.",[50,56],{"vendor_slug":51,"vendor_name":52,"vendor_logo":53,"product_slug":51,"product_name":52,"url":54,"description":55},"drata","Drata","\u002Fvendor-logos\u002Fdrata.png","https:\u002F\u002Fdrata.com\u002F","Continuous control monitoring and audit readiness across security frameworks.",{"vendor_slug":57,"vendor_name":58,"vendor_logo":59,"product_slug":57,"product_name":58,"url":60,"description":61},"vanta","Vanta","\u002Fvendor-logos\u002Fvanta.png","https:\u002F\u002Fwww.vanta.com\u002F","Automated evidence collection and continuous monitoring for ISO 27001, SOC 2, NIS2 and other frameworks.",[],{"slug":64,"title":65,"body":66,"framework_refs":67,"framework_notes":77},"hungarian-online-store-fined-41500-for-gdpr-transparency-failures-1785925312590","Hungarian Online Store Fined €41,500 for GDPR Transparency Failures","An online store operator in Hungary was fined HUF 15,000,000 (€41,500) by the National Data Protection Authority (NAIH) for failing to provide clear, concise, and intelligible information about its data processing activities, including inadequate disclosures around third-country data transfers. Under GDPR Articles 13 and 14, organizations are legally obligated to inform individuals about the purposes and legal bases for processing their personal data in a transparent manner. This case highlights that GDPR compliance is not just about technical safeguards — it equally demands clear, accessible, and accurate privacy documentation. Failure to maintain compliant privacy notices exposes organizations to significant financial penalties and reputational harm, even without a data breach occurring.",[68,69,70,71,72,73,74,75,76],"GDPR Article 5(1)(a) – Principle of Transparency","GDPR Article 13 – Information to be provided where personal data are collected from the data subject","GDPR Article 14 – Information to be provided where personal data have not been obtained from the data subject","GDPR Article 44-49 – Transfers of personal data to third countries","GDPR Article 30 – Records of processing activities","NIST Privacy Framework PR.PO-P1 – Policies and procedures for privacy","CIS Control 3 – Data Protection","ISO\u002FIEC 27701:2019 – Privacy Information Management","ITIL Service Design – Compliance and Legal Requirements Management",{}]