Hungary

Budapesti Műszaki és Gazdaságtudományi Egyetem (Budapest University of Technology and Economics)

22,200 €

GDPR enforcement action by Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) on 2020-12-10.

Rank · Sector

#117

of 357 in Public Sector and Education

Rank · Hungary

#21

of 75

Rank · All fines

#1,009

of 3,050

Case details

Authority: Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)
Date: 2020-12-10
Controller / Processor: Budapesti Műszaki és Gazdaságtudományi Egyetem (Budapest University of Technology and Economics)
Sector: Public Sector and Education
Quoted Articles: Art. 5 (1) a), b), c) GDPR, Art. 6 (1) GDPR, Art. 9 (2) GDPR, Art. 12 GDPR, Art. 13 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Hungarian DPA (NAIH) imposed a fine of EUR 22,200 against the Budapest University of Technology and Economics. NAIH finds that the controller unlawfully processed personal data in the course of audits of applications for social scholarships. Among other things, data was processed without a legal basis and in some cases particularly sensitive data was processed, although this was not necessary for the evaluation of the scholarship applications.

Open original source Links to the regulator's original publication or another source.