The Hungarian data protection authority, the NAIH has
imposed the first data protection fine in December 2018 which was
based on the infringement of the GDPR. It appears that in relation
with the first cuckoo" the NAIH applied the so called early
bird" discount known as a marketing strategy. Indeed, the fine
was not particularly high considering that it should be imposed
because of the infringement of data subject rights. Well, let's
see the details of the case.
1) Why did the procedure start?
The Controller operates a camera surveillance system at his
premises, where the Data Subject showed up in July 2018 for
administration purposes. A few days later, the Data Subject
contacted the Controller expressing that he would like to watch the
recordings mace of him and be provided with a copy of it. Further
he requested the Controller no to erase the recordings for 5 years
since he needs them to use in different procedures.