Hungary

Digi Telecommunications and Services Ltd.

205,000 €

GDPR enforcement action by Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) on 2023-06-22.

Rank · Sector

#78

of 366 in Media, Telecoms and Broadcasting

Rank · Hungary

of 73

Rank · All fines

#335

of 3,042

Case details

Authority: Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)
Date: 2023-06-22
Controller / Processor: Digi Telecommunications and Services Ltd.
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 5 (1) a) GDPR, Art. 32 (1), (2) GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Hungarian DPA has imposed a fine of EUR 205,000 against Digi Telecommunications and Services Ltd. The controller had suffered a data breach in which an unauthorized party managed to access personal data of data subjects (e.g. customers and newsletter subscribers) via the controller's website. During its investigation, the DPA found that the controller had failed to implement appropriate technical and organizational measures to protect personal data, which facilitated such an incident.

Open original source Links to the regulator's original publication or another source.