{"id":27062,"date":"2021-03-31T16:32:38","date_gmt":"2021-03-31T16:32:38","guid":{"rendered":"https:\/\/visegradlegal.hu\/?p=27062"},"modified":"2021-03-31T16:32:38","modified_gmt":"2021-03-31T16:32:38","slug":"data-protection-fines-for-unnecessary-data-processing","status":"publish","type":"post","link":"https:\/\/visegradlegal.hu\/en\/data-protection-gdpr\/data-protection-fines-for-unnecessary-data-processing\/","title":{"rendered":"Data protection fines for unnecessary data processing"},"content":{"rendered":"

Recently, the Hungarian Data Protection <\/strong>Office (NAIH)<\/strong> imposed fines in two major cases. Both could have been avoided with care and compliance with data protection rules.<\/strong><\/p>\n

In the first case, a credit institution not named in the decision, for the purpose of evaluating \u201cmaternity loan\u201d applications copied and stored electronically and on paper copies of the maternity books, adoption decisions, abortion or stillbirth documents requested from each applicant. The credit institution terminated the infringement immediately at the beginning of the official proceedings, nevertheless, NAIH imposed a significant amount of data protection fines on the bank.\u00a0According to the reasoning of the decision – emphasizing the data principle against the document principle – the data in the documents were sensitive data, which in the end were not actually used by the bank, on the other hand, their collection was not justified. By such data processing, the credit institution violated the GDPR multiple times. It violated the principle of data minimisation because it stored and processed data that was not necessary to achieve the goal.<\/strong> It further breached the principle of data processing linked to adequate legal basis and also failed to provide information.\u00a0Many of the provisions in GDPR are easy to breach if we do not think through which data are absolutely necessary when establishing a customer relationship. We comply with GDPR if we do not store or process other data than those absolutely necessary and hide other data or otherwise make them unrecognizable.<\/p>\n

In the other case, UPC Hungary violated data protection rules with its practice carried out before its merger, which was also sanctioned by NAIH with a significant amount of fine. UPC followed the practice of placing a brief and incomplete information on the take-a-number machine that a voice recording will be made during personal administration, which will be stored for 5 years, but if the customer protests, the recording will be immediately interrupted and cancelled upon request. The voice recording was done using a microphone visible to the customer in front of the administrator, which indicated with a red light that a voice recording was in progress.<\/p>\n

The NAIH found that UPC had violated multiple provisions of the GDPR by failing to provide an adequate legal basis for data processing and information on data processing, as well as violating the principles of purpose limitation and data minimization<\/strong>.<\/p>\n

Both of the fines and the underlying regulatory procedure could have been avoided if the enterprises had complied with the GDPR principles and informed their customers about data processing in an appropriate manner and content, and had processed only data that was strictly necessary for the performance of their activities.<\/p>\n","protected":false},"excerpt":{"rendered":"

Recently, the Hungarian Data Protection Office (NAIH) imposed fines in two major cases. Both could have been avoided with care and compliance with data protection rules. In the first case, a credit institution not named in the decision, for the purpose of evaluating \u201cmaternity loan\u201d applications copied and stored electronically and on paper copies of […]<\/p>\n","protected":false},"author":2,"featured_media":27060,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"categories":[83],"tags":[123,329,615,614,613],"class_list":["post-27062","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-data-protection-gdpr","tag-data-processing","tag-fine","tag-gdpr-en","tag-naih-en","tag-voice-recording"],"yoast_head":"\nData protection fines for unnecessary data processing - Ill\u00e9s Law Office<\/title>\n<meta name=\"description\" content=\"Hungarian Data Protection Office imposed fines in two major cases. Both could have been avoided with care and compliance.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/visegradlegal.hu\/en\/data-protection-gdpr\/data-protection-fines-for-unnecessary-data-processing\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Data protection fines for unnecessary data processing - Ill\u00e9s Law Office\" \/>\n<meta property=\"og:description\" content=\"Hungarian Data Protection Office imposed fines in two major cases. Both could have been avoided with care and compliance.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/visegradlegal.hu\/en\/data-protection-gdpr\/data-protection-fines-for-unnecessary-data-processing\/\" \/>\n<meta property=\"og:site_name\" content=\"Ill\u00e9s&N\u00e9meth Association of Lawyers\" \/>\n<meta property=\"article:published_time\" content=\"2021-03-31T16:32:38+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/visegradlegal.hu\/wp-content\/uploads\/2021\/03\/gdpr-laptop.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1920\" \/>\n\t<meta property=\"og:image:height\" content=\"1281\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"dr. Ill\u00e9s \u00c1d\u00e1m, LL.M\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u00c1d\u00e1m Ill\u00e9s, LL.M\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/visegradlegal.hu\/en\/data-protection-gdpr\/data-protection-fines-for-unnecessary-data-processing\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/visegradlegal.hu\/en\/data-protection-gdpr\/data-protection-fines-for-unnecessary-data-processing\/\"},\"author\":{\"name\":\"dr. Ill\u00e9s \u00c1d\u00e1m, LL.M\",\"@id\":\"https:\/\/visegradlegal.hu\/#\/schema\/person\/1ad902f7d828c43fc802876c009b5fe4\"},\"headline\":\"Data protection fines for unnecessary data processing\",\"datePublished\":\"2021-03-31T16:32:38+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/visegradlegal.hu\/en\/data-protection-gdpr\/data-protection-fines-for-unnecessary-data-processing\/\"},\"wordCount\":447,\"image\":{\"@id\":\"https:\/\/visegradlegal.hu\/en\/data-protection-gdpr\/data-protection-fines-for-unnecessary-data-processing\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/visegradlegal.hu\/wp-content\/uploads\/2021\/03\/gdpr-laptop.jpg\",\"keywords\":[\"data processing\",\"fine\",\"GDPR\",\"NAIH\",\"voice recording\"],\"articleSection\":[\"Data protection (GDPR)\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/visegradlegal.hu\/en\/data-protection-gdpr\/data-protection-fines-for-unnecessary-data-processing\/\",\"url\":\"https:\/\/visegradlegal.hu\/en\/data-protection-gdpr\/data-protection-fines-for-unnecessary-data-processing\/\",\"name\":\"Data protection fines for unnecessary data processing - Ill\u00e9s Law Office\",\"isPartOf\":{\"@id\":\"https:\/\/visegradlegal.hu\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/visegradlegal.hu\/en\/data-protection-gdpr\/data-protection-fines-for-unnecessary-data-processing\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/visegradlegal.hu\/en\/data-protection-gdpr\/data-protection-fines-for-unnecessary-data-processing\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/visegradlegal.hu\/wp-content\/uploads\/2021\/03\/gdpr-laptop.jpg\",\"datePublished\":\"2021-03-31T16:32:38+00:00\",\"author\":{\"@id\":\"https:\/\/visegradlegal.hu\/#\/schema\/person\/1ad902f7d828c43fc802876c009b5fe4\"},\"description\":\"Hungarian Data Protection Office imposed fines in two major cases. Both could have been avoided with care and compliance.\",\"breadcrumb\":{\"@id\":\"https:\/\/visegradlegal.hu\/en\/data-protection-gdpr\/data-protection-fines-for-unnecessary-data-processing\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/visegradlegal.hu\/en\/data-protection-gdpr\/data-protection-fines-for-unnecessary-data-processing\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/visegradlegal.hu\/en\/data-protection-gdpr\/data-protection-fines-for-unnecessary-data-processing\/#primaryimage\",\"url\":\"https:\/\/visegradlegal.hu\/wp-content\/uploads\/2021\/03\/gdpr-laptop.jpg\",\"contentUrl\":\"https:\/\/visegradlegal.hu\/wp-content\/uploads\/2021\/03\/gdpr-laptop.jpg\",\"width\":1920,\"height\":1281},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/visegradlegal.hu\/en\/data-protection-gdpr\/data-protection-fines-for-unnecessary-data-processing\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/visegradlegal.hu\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Data protection fines for unnecessary data processing\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/visegradlegal.hu\/#website\",\"url\":\"https:\/\/visegradlegal.hu\/\",\"name\":\"Ill\u00e9s&N\u00e9meth Association of Lawyers\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/visegradlegal.hu\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/visegradlegal.hu\/#\/schema\/person\/1ad902f7d828c43fc802876c009b5fe4\",\"name\":\"dr. Ill\u00e9s \u00c1d\u00e1m, LL.M\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/secure.gravatar.com\/avatar\/c6d0740d62c85f611f13fd37db3d6674c8f28d34f3db3843db525be55d09f1aa?s=96&r=g\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/c6d0740d62c85f611f13fd37db3d6674c8f28d34f3db3843db525be55d09f1aa?s=96&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/c6d0740d62c85f611f13fd37db3d6674c8f28d34f3db3843db525be55d09f1aa?s=96&r=g\",\"caption\":\"dr. Ill\u00e9s \u00c1d\u00e1m, LL.M\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Data protection fines for unnecessary data processing - Ill\u00e9s Law Office","description":"Hungarian Data Protection Office imposed fines in two major cases. Both could have been avoided with care and compliance.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/visegradlegal.hu\/en\/data-protection-gdpr\/data-protection-fines-for-unnecessary-data-processing\/","og_locale":"en_US","og_type":"article","og_title":"Data protection fines for unnecessary data processing - Ill\u00e9s Law Office","og_description":"Hungarian Data Protection Office imposed fines in two major cases. Both could have been avoided with care and compliance.","og_url":"https:\/\/visegradlegal.hu\/en\/data-protection-gdpr\/data-protection-fines-for-unnecessary-data-processing\/","og_site_name":"Ill\u00e9s&N\u00e9meth Association of Lawyers","article_published_time":"2021-03-31T16:32:38+00:00","og_image":[{"width":1920,"height":1281,"url":"https:\/\/visegradlegal.hu\/wp-content\/uploads\/2021\/03\/gdpr-laptop.jpg","type":"image\/jpeg"}],"author":"dr. Ill\u00e9s \u00c1d\u00e1m, LL.M","twitter_card":"summary_large_image","twitter_misc":{"Written by":"\u00c1d\u00e1m Ill\u00e9s, LL.M","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/visegradlegal.hu\/en\/data-protection-gdpr\/data-protection-fines-for-unnecessary-data-processing\/#article","isPartOf":{"@id":"https:\/\/visegradlegal.hu\/en\/data-protection-gdpr\/data-protection-fines-for-unnecessary-data-processing\/"},"author":{"name":"dr. Ill\u00e9s \u00c1d\u00e1m, LL.M","@id":"https:\/\/visegradlegal.hu\/#\/schema\/person\/1ad902f7d828c43fc802876c009b5fe4"},"headline":"Data protection fines for unnecessary data processing","datePublished":"2021-03-31T16:32:38+00:00","mainEntityOfPage":{"@id":"https:\/\/visegradlegal.hu\/en\/data-protection-gdpr\/data-protection-fines-for-unnecessary-data-processing\/"},"wordCount":447,"image":{"@id":"https:\/\/visegradlegal.hu\/en\/data-protection-gdpr\/data-protection-fines-for-unnecessary-data-processing\/#primaryimage"},"thumbnailUrl":"https:\/\/visegradlegal.hu\/wp-content\/uploads\/2021\/03\/gdpr-laptop.jpg","keywords":["data processing","fine","GDPR","NAIH","voice recording"],"articleSection":["Data protection (GDPR)"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/visegradlegal.hu\/en\/data-protection-gdpr\/data-protection-fines-for-unnecessary-data-processing\/","url":"https:\/\/visegradlegal.hu\/en\/data-protection-gdpr\/data-protection-fines-for-unnecessary-data-processing\/","name":"Data protection fines for unnecessary data processing - Ill\u00e9s Law Office","isPartOf":{"@id":"https:\/\/visegradlegal.hu\/#website"},"primaryImageOfPage":{"@id":"https:\/\/visegradlegal.hu\/en\/data-protection-gdpr\/data-protection-fines-for-unnecessary-data-processing\/#primaryimage"},"image":{"@id":"https:\/\/visegradlegal.hu\/en\/data-protection-gdpr\/data-protection-fines-for-unnecessary-data-processing\/#primaryimage"},"thumbnailUrl":"https:\/\/visegradlegal.hu\/wp-content\/uploads\/2021\/03\/gdpr-laptop.jpg","datePublished":"2021-03-31T16:32:38+00:00","author":{"@id":"https:\/\/visegradlegal.hu\/#\/schema\/person\/1ad902f7d828c43fc802876c009b5fe4"},"description":"Hungarian Data Protection Office imposed fines in two major cases. Both could have been avoided with care and compliance.","breadcrumb":{"@id":"https:\/\/visegradlegal.hu\/en\/data-protection-gdpr\/data-protection-fines-for-unnecessary-data-processing\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/visegradlegal.hu\/en\/data-protection-gdpr\/data-protection-fines-for-unnecessary-data-processing\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/visegradlegal.hu\/en\/data-protection-gdpr\/data-protection-fines-for-unnecessary-data-processing\/#primaryimage","url":"https:\/\/visegradlegal.hu\/wp-content\/uploads\/2021\/03\/gdpr-laptop.jpg","contentUrl":"https:\/\/visegradlegal.hu\/wp-content\/uploads\/2021\/03\/gdpr-laptop.jpg","width":1920,"height":1281},{"@type":"BreadcrumbList","@id":"https:\/\/visegradlegal.hu\/en\/data-protection-gdpr\/data-protection-fines-for-unnecessary-data-processing\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/visegradlegal.hu\/"},{"@type":"ListItem","position":2,"name":"Data protection fines for unnecessary data processing"}]},{"@type":"WebSite","@id":"https:\/\/visegradlegal.hu\/#website","url":"https:\/\/visegradlegal.hu\/","name":"Ill\u00e9s&N\u00e9meth Association of Lawyers","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/visegradlegal.hu\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/visegradlegal.hu\/#\/schema\/person\/1ad902f7d828c43fc802876c009b5fe4","name":"dr. Ill\u00e9s \u00c1d\u00e1m, LL.M","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/c6d0740d62c85f611f13fd37db3d6674c8f28d34f3db3843db525be55d09f1aa?s=96&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/c6d0740d62c85f611f13fd37db3d6674c8f28d34f3db3843db525be55d09f1aa?s=96&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/c6d0740d62c85f611f13fd37db3d6674c8f28d34f3db3843db525be55d09f1aa?s=96&r=g","caption":"dr. Ill\u00e9s \u00c1d\u00e1m, LL.M"}}]}},"_links":{"self":[{"href":"https:\/\/visegradlegal.hu\/en\/wp-json\/wp\/v2\/posts\/27062","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/visegradlegal.hu\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/visegradlegal.hu\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/visegradlegal.hu\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/visegradlegal.hu\/en\/wp-json\/wp\/v2\/comments?post=27062"}],"version-history":[{"count":0,"href":"https:\/\/visegradlegal.hu\/en\/wp-json\/wp\/v2\/posts\/27062\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/visegradlegal.hu\/en\/wp-json\/wp\/v2\/media\/27060"}],"wp:attachment":[{"href":"https:\/\/visegradlegal.hu\/en\/wp-json\/wp\/v2\/media?parent=27062"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/visegradlegal.hu\/en\/wp-json\/wp\/v2\/categories?post=27062"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/visegradlegal.hu\/en\/wp-json\/wp\/v2\/tags?post=27062"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}