Hungary

Microenterprise operating a webshop (name redacted)

520 €

GDPR enforcement action by Hungarian National Authority for Data Protection and Freedom of Information (NAIH) on 2026-01-29.

Rank · Sector

#628

of 657 in Industry and Commerce

Rank · Hungary

#75

of 79

Rank · All fines

#3,052

of 3,267

Case details

Authority: Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
Date: 2026-01-29
Controller / Processor: Microenterprise operating a webshop (name redacted)
Sector: Industry and Commerce
Quoted Articles: Art. 12 (1) GDPR
Type of violation: Insufficient fulfilment of information obligations

Summary

The Hungarian DPA has imposed a fine of EUR 520 on a microenterprise operating a webshop. The controller's website was investigated in an ex officio investigation limited to the website's privacy notice. It was found that the privacy notice did not clearly state the controller's address, incorrectly named Facebook as a processor instead of a third party, and that information on processing purposes was not easily accessible. The authority therefore deemed the notice to be inadequate.

Open original source Links to the regulator's original publication or another source.