Mediaworks Hungary Zrt.
GDPR enforcement action by Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) on 2026-05-26.
Case details
- Authority
- Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)
- Date
- 2026-05-26
- Controller / Processor
- Mediaworks Hungary Zrt.
- Sector
- Media, Telecoms and Broadcasting
- Quoted Articles
- Art. 6 (1) GDPR, Art. 9 (1) GDPR
- Type of violation
- Insufficient legal basis for data processing
Summary
The Hungarian DPA has imposed a fine of EUR 140,127 on Mediaworks Hungary Zrt. On 7 November 2025, an unknown party published an interactive map created using data leaked from the Tisza Party app. The map displayed the names, addresses, telephone numbers, email addresses and geolocation coordinates of the data subjects, along with their political opinions. The media were informed about the publication of the map beforehand, and the authority was warned not to share the link to the interactive map. The controller owns and publishes three media outlets, all of which made the link accessible to the public. In total, the leaked data affected about 200,000 data subjects, which the outlets made accessible.