Mediaworks Hungary Zrt.
GDPR enforcement action by Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) on 2026-05-26.
Case details
- Authority
- Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)
- Date
- 2026-05-26
- Controller / Processor
- Mediaworks Hungary Zrt.
- Sector
- Media, Telecoms and Broadcasting
- Quoted Articles
- Art. 6 (1) GDPR, Art. 9 (1) GDPR
- Type of violation
- Insufficient legal basis for data processing
Summary
The Hungarian DPA has imposed a fine of EUR 140,500 on Mediaworks Hungary Zrt. An unknown individual published an interactive map showing the personal data of persons affiliated with the Tisza Party, including their names, addresses and contact details. After the map was published, multiple media outlets started reporting on it, but did not publish the link, instead encouraging readers not to search for it. Furthermore, the DPA warned media outlets against publishing the link to the map. However, the controller published the direct link to the map in three publications, thereby processing the personal data contained in the map, including data related to political beliefs, without a sufficient legal basis.