Hungary

Operator of an online marketplace

42,052 €

GDPR enforcement action by Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) on 2026-05-12.

Rank · Sector

#121

of 619 in Industry and Commerce

Rank · Hungary

#18

of 79

Rank · All fines

#807

of 3,152

Case details

Authority: Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)
Date: 2026-05-12
Controller / Processor: Operator of an online marketplace
Sector: Industry and Commerce
Quoted Articles: Art. 5 (1) a) GDPR, Art. 12 (1) GDPR, Art. 13 (1) a), c), d), e), f) GDPR, Art. 13 (2) a), b), c), d), e), f) GDPR
Type of violation: Insufficient fulfilment of information obligations

Summary

The Hungarian DPA has imposed a fine of EUR 42,052 on the operator of an online marketplace. In June 2025, the authority carried out an unannounced inspection of the controller's website, marketplace and blog. The inspection involved viewing the website, creating a test account and saving copies of the relevant pages. Several different privacy notices were found: three from 2018, 2021 and 2023; separate ones for prize games and the blog. Furthermore, some of the privacy information was contained within the general terms and conditions. The controller's DPO's contract expired in December 2024, and a new DPO was not appointed. Therefore, it was not possible to transparently inform data subjects about the processing of their data.

Open original source Links to the regulator's original publication or another source.