{"id":3666,"date":"2022-05-06T17:22:53","date_gmt":"2022-05-06T15:22:53","guid":{"rendered":"https:\/\/blogs.dlapiper.com\/advocatus\/?p=3666"},"modified":"2023-01-06T17:02:01","modified_gmt":"2023-01-06T16:02:01","slug":"what-we-can-learn-from-the-case-resulting-in-a-record-gdpr-fine-by-the-hungarian-data-protection-authority-for-the-unlawful-use-of-artificial-intelligence","status":"publish","type":"post","link":"https:\/\/blogs.dlapiper.com\/advocatus\/2022\/05\/what-we-can-learn-from-the-case-resulting-in-a-record-gdpr-fine-by-the-hungarian-data-protection-authority-for-the-unlawful-use-of-artificial-intelligence\/","title":{"rendered":"What we can learn from the case resulting in a record GDPR fine by the Hungarian Data Protection Authority for the unlawful use of artificial intelligence"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
The Hungarian Data Protection Authority (Nemzeti Adatv\u00e9delmi \u00e9s Inform\u00e1ci\u00f3szabads\u00e1g Hat\u00f3s\u00e1g, NAIH) has recently published its full decision on the case in which the Authority imposed a fine ca. EUR 665,000 (HUF 250 million), the highest data protection fine to date in Hungary.<\/strong><\/h5>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

In the given case, the Authority assessed the use of an artificial intelligence (AI) solution by a Hungarian bank to analyze voice recordings of calls conducted between its customers and the call center. In its decision, the Authority highlighted the solution’s inefficiency in predicting the customers’ emotions accurately, as well as the fact that AI solutions can only be used for assessing emotional status of data subjects in rare situations, where the benefits of such use outweighs its potential negative effects (e.g. in certain cases of patient treatment). The decision of the Authority further underpinned that the bank only gave an overly general information on the data processing by AI and its data protection impact assessment (DPIA) and balancing test documentation did also not comply with the GDPR.<\/p>

In the following lines, we present techniques to be applied, as well as aspects to be considered by similar companies using AI solutions, in order to avoid non-compliance with the GDPR and relevant data protection requirements. For more information on the details of the given case, please see our previous article ([link<\/a>]).<\/p>

With regard to the decision of the Authority, companies planning to use AI solutions for processing personal data must exercise extreme caution. This also means that such solutions should be gradually tested in cooperation with the manufacturer\/service provider partner before being introduced by the company. Firstly, non-personal data should be used to feed the solution and personal data should only be used after effective testing in the above referred first phase with respect to the requirements and specificalities of the given industry and business. After the introduction of the solution, the company also needs to constantly monitor the efficiency of the solution and its effect on data subjects. This also means that the operation should be halted, and the solution needs to be recalibrated if deemed necessary, especially with regard to ineffective results, a possible data breach or another incident.<\/p>

Companies using AI solutions also need to thoroughly draft the respective parts of their privacy policies to give adequate information on the use of the AI solution, the logic behind it and its effects on the rights and freedoms of the data subjects, as well as information on how long personal data are retained and in which form.<\/p>

The DPIA documentation, as well as the balancing test of such companies should also clearly identify the interests of the given company, the rights and freedoms of data subjects affected by the processing, the risks threatening such rights and freedoms and the measures used by the company to reduce or eliminate the risks. Besides the above, an internal security policy specifying the necessary organizational and technical security measures also needs to be prepared by companies using AI. Such documentation could hugely help the staff members of the company using the solution understand the respective data security requirements and effectively apply techniques to reduce privacy-related risks.\u00a0\u00a0\u00a0\u00a0\u00a0<\/p>

With regard to the above, companies planning to use AI solutions need to carefully plan the use of the solution and the related data processing in order to avoid risks related to non-compliance with data protection and data security requirements.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Authors: Zolt\u00e1n Kozma, D\u00e1niel Necz<\/em><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\"Kozma\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t

\n\t\t\t\t\t\t\t\tZolt\u00e1n Kozma \t\t\t\t\t\t\t<\/h3>\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\tPartner,

Head of Intellectual Property and Technology\n\n\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t\t

\n\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t

\n\t\t\t\t\t\t\tZolt\u00e1n Kozma \t\t\t\t\t\t<\/h3>\n\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\tZolt\u00e1n advises clients on technology, media and telecommunication related matters. He also advises on all aspects of data protection and privacy, inc. freedom of information, as well as cyber security. He represents his clients in authority and court proceedings on the above areas. He also provides counseling in general commercial matters, with a special focus on e-commerce, licensing, distribution and franchise. His main industry focus beside technology is on industrials (aerospace and defense, automotive, chemicals and manufacturing).\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\tGet in touch\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

How can we help? Get in touch.<\/b><\/h2>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\tContact<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Follow us on LinkedIn<\/b><\/h2>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\tDLA Piper Hungary<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

The Hungarian Data Protection Authority (Nemzeti Adatv\u00e9delmi \u00e9s Inform\u00e1ci\u00f3szabads\u00e1g Hat\u00f3s\u00e1g, NAIH) has recently published its full decision on the case in which the Authority imposed a fine ca. EUR 665,000 (HUF 250 million), the highest data protection fine to date in Hungary.<\/p>\n","protected":false},"author":1,"featured_media":2880,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"default","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"default","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[5],"tags":[1056,341,827,353],"coauthors":[705],"class_list":["post-3666","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-adatvedelem","tag-data-breach","tag-data-protection","tag-fine","tag-gdpr"],"yoast_head":"\nRecord GDPR fine by the Hungarian Data Protection Authority<\/title>\n<meta name=\"description\" content=\"The Authority imposed a fine ca. EUR 665,000 (HUF 250 million), the highest data protection fine to date in Hungary.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/blogs.dlapiper.com\/advocatus\/2022\/05\/what-we-can-learn-from-the-case-resulting-in-a-record-gdpr-fine-by-the-hungarian-data-protection-authority-for-the-unlawful-use-of-artificial-intelligence\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Record GDPR fine by the Hungarian Data Protection Authority\" \/>\n<meta property=\"og:description\" content=\"The Authority imposed a fine ca. EUR 665,000 (HUF 250 million), the highest data protection fine to date in Hungary.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/blogs.dlapiper.com\/advocatus\/2022\/05\/what-we-can-learn-from-the-case-resulting-in-a-record-gdpr-fine-by-the-hungarian-data-protection-authority-for-the-unlawful-use-of-artificial-intelligence\/\" \/>\n<meta property=\"og:site_name\" content=\"Advocatus\" \/>\n<meta property=\"article:published_time\" content=\"2022-05-06T15:22:53+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-01-06T16:02:01+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/blogs.dlapiper.com\/advocatus\/files\/2021\/11\/12.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"300\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"DLA Piper\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"DLA Piper\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/blogs.dlapiper.com\/advocatus\/2022\/05\/what-we-can-learn-from-the-case-resulting-in-a-record-gdpr-fine-by-the-hungarian-data-protection-authority-for-the-unlawful-use-of-artificial-intelligence\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/blogs.dlapiper.com\/advocatus\/2022\/05\/what-we-can-learn-from-the-case-resulting-in-a-record-gdpr-fine-by-the-hungarian-data-protection-authority-for-the-unlawful-use-of-artificial-intelligence\/\"},\"author\":{\"name\":\"DLA Piper\",\"@id\":\"https:\/\/blogs.dlapiper.com\/advocatus\/#\/schema\/person\/e4f1320bd6f7e07fbf942762d3bd3206\"},\"headline\":\"What we can learn from the case resulting in a record GDPR fine by the Hungarian Data Protection Authority for the unlawful use of artificial intelligence\",\"datePublished\":\"2022-05-06T15:22:53+00:00\",\"dateModified\":\"2023-01-06T16:02:01+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/blogs.dlapiper.com\/advocatus\/2022\/05\/what-we-can-learn-from-the-case-resulting-in-a-record-gdpr-fine-by-the-hungarian-data-protection-authority-for-the-unlawful-use-of-artificial-intelligence\/\"},\"wordCount\":712,\"publisher\":{\"@id\":\"https:\/\/blogs.dlapiper.com\/advocatus\/#organization\"},\"image\":{\"@id\":\"https:\/\/blogs.dlapiper.com\/advocatus\/2022\/05\/what-we-can-learn-from-the-case-resulting-in-a-record-gdpr-fine-by-the-hungarian-data-protection-authority-for-the-unlawful-use-of-artificial-intelligence\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/blogs.dlapiper.com\/advocatus\/files\/2021\/11\/12.png\",\"keywords\":[\"data breach\",\"data protection\",\"fine\",\"GDPR\"],\"articleSection\":[\"Szellemi tulajdon, Adatv\u00e9delem | IPT, Data Protection\"],\"inLanguage\":\"en-GB\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/blogs.dlapiper.com\/advocatus\/2022\/05\/what-we-can-learn-from-the-case-resulting-in-a-record-gdpr-fine-by-the-hungarian-data-protection-authority-for-the-unlawful-use-of-artificial-intelligence\/\",\"url\":\"https:\/\/blogs.dlapiper.com\/advocatus\/2022\/05\/what-we-can-learn-from-the-case-resulting-in-a-record-gdpr-fine-by-the-hungarian-data-protection-authority-for-the-unlawful-use-of-artificial-intelligence\/\",\"name\":\"Record GDPR fine by the Hungarian Data Protection Authority\",\"isPartOf\":{\"@id\":\"https:\/\/blogs.dlapiper.com\/advocatus\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/blogs.dlapiper.com\/advocatus\/2022\/05\/what-we-can-learn-from-the-case-resulting-in-a-record-gdpr-fine-by-the-hungarian-data-protection-authority-for-the-unlawful-use-of-artificial-intelligence\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/blogs.dlapiper.com\/advocatus\/2022\/05\/what-we-can-learn-from-the-case-resulting-in-a-record-gdpr-fine-by-the-hungarian-data-protection-authority-for-the-unlawful-use-of-artificial-intelligence\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/blogs.dlapiper.com\/advocatus\/files\/2021\/11\/12.png\",\"datePublished\":\"2022-05-06T15:22:53+00:00\",\"dateModified\":\"2023-01-06T16:02:01+00:00\",\"description\":\"The Authority imposed a fine ca. EUR 665,000 (HUF 250 million), the highest data protection fine to date in Hungary.\",\"breadcrumb\":{\"@id\":\"https:\/\/blogs.dlapiper.com\/advocatus\/2022\/05\/what-we-can-learn-from-the-case-resulting-in-a-record-gdpr-fine-by-the-hungarian-data-protection-authority-for-the-unlawful-use-of-artificial-intelligence\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/blogs.dlapiper.com\/advocatus\/2022\/05\/what-we-can-learn-from-the-case-resulting-in-a-record-gdpr-fine-by-the-hungarian-data-protection-authority-for-the-unlawful-use-of-artificial-intelligence\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/blogs.dlapiper.com\/advocatus\/2022\/05\/what-we-can-learn-from-the-case-resulting-in-a-record-gdpr-fine-by-the-hungarian-data-protection-authority-for-the-unlawful-use-of-artificial-intelligence\/#primaryimage\",\"url\":\"https:\/\/blogs.dlapiper.com\/advocatus\/files\/2021\/11\/12.png\",\"contentUrl\":\"https:\/\/blogs.dlapiper.com\/advocatus\/files\/2021\/11\/12.png\",\"width\":1200,\"height\":300,\"caption\":\"globe-header\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/blogs.dlapiper.com\/advocatus\/2022\/05\/what-we-can-learn-from-the-case-resulting-in-a-record-gdpr-fine-by-the-hungarian-data-protection-authority-for-the-unlawful-use-of-artificial-intelligence\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/blogs.dlapiper.com\/advocatus\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"What we can learn from the case resulting in a record GDPR fine by the Hungarian Data Protection Authority for the unlawful use of artificial intelligence\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/blogs.dlapiper.com\/advocatus\/#website\",\"url\":\"https:\/\/blogs.dlapiper.com\/advocatus\/\",\"name\":\"Advocatus\",\"description\":\"A DLA Piper Jogi Blogja\",\"publisher\":{\"@id\":\"https:\/\/blogs.dlapiper.com\/advocatus\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/blogs.dlapiper.com\/advocatus\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/blogs.dlapiper.com\/advocatus\/#organization\",\"name\":\"Advocatus\",\"url\":\"https:\/\/blogs.dlapiper.com\/advocatus\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/blogs.dlapiper.com\/advocatus\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/blogs.dlapiper.com\/advocatus\/files\/2019\/06\/cropped-logo-144-1.png\",\"contentUrl\":\"https:\/\/blogs.dlapiper.com\/advocatus\/files\/2019\/06\/cropped-logo-144-1.png\",\"width\":223,\"height\":130,\"caption\":\"Advocatus\"},\"image\":{\"@id\":\"https:\/\/blogs.dlapiper.com\/advocatus\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.linkedin.com\/showcase\/dla-piper-hungary\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/blogs.dlapiper.com\/advocatus\/#\/schema\/person\/e4f1320bd6f7e07fbf942762d3bd3206\",\"name\":\"DLA Piper\",\"url\":\"https:\/\/blogs.dlapiper.com\/advocatus\/author\/blogadmin\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Record GDPR fine by the Hungarian Data Protection Authority","description":"The Authority imposed a fine ca. EUR 665,000 (HUF 250 million), the highest data protection fine to date in Hungary.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/blogs.dlapiper.com\/advocatus\/2022\/05\/what-we-can-learn-from-the-case-resulting-in-a-record-gdpr-fine-by-the-hungarian-data-protection-authority-for-the-unlawful-use-of-artificial-intelligence\/","og_locale":"en_GB","og_type":"article","og_title":"Record GDPR fine by the Hungarian Data Protection Authority","og_description":"The Authority imposed a fine ca. EUR 665,000 (HUF 250 million), the highest data protection fine to date in Hungary.","og_url":"https:\/\/blogs.dlapiper.com\/advocatus\/2022\/05\/what-we-can-learn-from-the-case-resulting-in-a-record-gdpr-fine-by-the-hungarian-data-protection-authority-for-the-unlawful-use-of-artificial-intelligence\/","og_site_name":"Advocatus","article_published_time":"2022-05-06T15:22:53+00:00","article_modified_time":"2023-01-06T16:02:01+00:00","og_image":[{"width":1200,"height":300,"url":"https:\/\/blogs.dlapiper.com\/advocatus\/files\/2021\/11\/12.png","type":"image\/png"}],"author":"DLA Piper","twitter_card":"summary_large_image","twitter_misc":{"Written by":"DLA Piper","Estimated reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/blogs.dlapiper.com\/advocatus\/2022\/05\/what-we-can-learn-from-the-case-resulting-in-a-record-gdpr-fine-by-the-hungarian-data-protection-authority-for-the-unlawful-use-of-artificial-intelligence\/#article","isPartOf":{"@id":"https:\/\/blogs.dlapiper.com\/advocatus\/2022\/05\/what-we-can-learn-from-the-case-resulting-in-a-record-gdpr-fine-by-the-hungarian-data-protection-authority-for-the-unlawful-use-of-artificial-intelligence\/"},"author":{"name":"DLA Piper","@id":"https:\/\/blogs.dlapiper.com\/advocatus\/#\/schema\/person\/e4f1320bd6f7e07fbf942762d3bd3206"},"headline":"What we can learn from the case resulting in a record GDPR fine by the Hungarian Data Protection Authority for the unlawful use of artificial intelligence","datePublished":"2022-05-06T15:22:53+00:00","dateModified":"2023-01-06T16:02:01+00:00","mainEntityOfPage":{"@id":"https:\/\/blogs.dlapiper.com\/advocatus\/2022\/05\/what-we-can-learn-from-the-case-resulting-in-a-record-gdpr-fine-by-the-hungarian-data-protection-authority-for-the-unlawful-use-of-artificial-intelligence\/"},"wordCount":712,"publisher":{"@id":"https:\/\/blogs.dlapiper.com\/advocatus\/#organization"},"image":{"@id":"https:\/\/blogs.dlapiper.com\/advocatus\/2022\/05\/what-we-can-learn-from-the-case-resulting-in-a-record-gdpr-fine-by-the-hungarian-data-protection-authority-for-the-unlawful-use-of-artificial-intelligence\/#primaryimage"},"thumbnailUrl":"https:\/\/blogs.dlapiper.com\/advocatus\/files\/2021\/11\/12.png","keywords":["data breach","data protection","fine","GDPR"],"articleSection":["Szellemi tulajdon, Adatv\u00e9delem | IPT, Data Protection"],"inLanguage":"en-GB"},{"@type":"WebPage","@id":"https:\/\/blogs.dlapiper.com\/advocatus\/2022\/05\/what-we-can-learn-from-the-case-resulting-in-a-record-gdpr-fine-by-the-hungarian-data-protection-authority-for-the-unlawful-use-of-artificial-intelligence\/","url":"https:\/\/blogs.dlapiper.com\/advocatus\/2022\/05\/what-we-can-learn-from-the-case-resulting-in-a-record-gdpr-fine-by-the-hungarian-data-protection-authority-for-the-unlawful-use-of-artificial-intelligence\/","name":"Record GDPR fine by the Hungarian Data Protection Authority","isPartOf":{"@id":"https:\/\/blogs.dlapiper.com\/advocatus\/#website"},"primaryImageOfPage":{"@id":"https:\/\/blogs.dlapiper.com\/advocatus\/2022\/05\/what-we-can-learn-from-the-case-resulting-in-a-record-gdpr-fine-by-the-hungarian-data-protection-authority-for-the-unlawful-use-of-artificial-intelligence\/#primaryimage"},"image":{"@id":"https:\/\/blogs.dlapiper.com\/advocatus\/2022\/05\/what-we-can-learn-from-the-case-resulting-in-a-record-gdpr-fine-by-the-hungarian-data-protection-authority-for-the-unlawful-use-of-artificial-intelligence\/#primaryimage"},"thumbnailUrl":"https:\/\/blogs.dlapiper.com\/advocatus\/files\/2021\/11\/12.png","datePublished":"2022-05-06T15:22:53+00:00","dateModified":"2023-01-06T16:02:01+00:00","description":"The Authority imposed a fine ca. EUR 665,000 (HUF 250 million), the highest data protection fine to date in Hungary.","breadcrumb":{"@id":"https:\/\/blogs.dlapiper.com\/advocatus\/2022\/05\/what-we-can-learn-from-the-case-resulting-in-a-record-gdpr-fine-by-the-hungarian-data-protection-authority-for-the-unlawful-use-of-artificial-intelligence\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/blogs.dlapiper.com\/advocatus\/2022\/05\/what-we-can-learn-from-the-case-resulting-in-a-record-gdpr-fine-by-the-hungarian-data-protection-authority-for-the-unlawful-use-of-artificial-intelligence\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/blogs.dlapiper.com\/advocatus\/2022\/05\/what-we-can-learn-from-the-case-resulting-in-a-record-gdpr-fine-by-the-hungarian-data-protection-authority-for-the-unlawful-use-of-artificial-intelligence\/#primaryimage","url":"https:\/\/blogs.dlapiper.com\/advocatus\/files\/2021\/11\/12.png","contentUrl":"https:\/\/blogs.dlapiper.com\/advocatus\/files\/2021\/11\/12.png","width":1200,"height":300,"caption":"globe-header"},{"@type":"BreadcrumbList","@id":"https:\/\/blogs.dlapiper.com\/advocatus\/2022\/05\/what-we-can-learn-from-the-case-resulting-in-a-record-gdpr-fine-by-the-hungarian-data-protection-authority-for-the-unlawful-use-of-artificial-intelligence\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/blogs.dlapiper.com\/advocatus\/"},{"@type":"ListItem","position":2,"name":"What we can learn from the case resulting in a record GDPR fine by the Hungarian Data Protection Authority for the unlawful use of artificial intelligence"}]},{"@type":"WebSite","@id":"https:\/\/blogs.dlapiper.com\/advocatus\/#website","url":"https:\/\/blogs.dlapiper.com\/advocatus\/","name":"Advocatus","description":"A DLA Piper Jogi Blogja","publisher":{"@id":"https:\/\/blogs.dlapiper.com\/advocatus\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/blogs.dlapiper.com\/advocatus\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/blogs.dlapiper.com\/advocatus\/#organization","name":"Advocatus","url":"https:\/\/blogs.dlapiper.com\/advocatus\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/blogs.dlapiper.com\/advocatus\/#\/schema\/logo\/image\/","url":"https:\/\/blogs.dlapiper.com\/advocatus\/files\/2019\/06\/cropped-logo-144-1.png","contentUrl":"https:\/\/blogs.dlapiper.com\/advocatus\/files\/2019\/06\/cropped-logo-144-1.png","width":223,"height":130,"caption":"Advocatus"},"image":{"@id":"https:\/\/blogs.dlapiper.com\/advocatus\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/showcase\/dla-piper-hungary\/"]},{"@type":"Person","@id":"https:\/\/blogs.dlapiper.com\/advocatus\/#\/schema\/person\/e4f1320bd6f7e07fbf942762d3bd3206","name":"DLA Piper","url":"https:\/\/blogs.dlapiper.com\/advocatus\/author\/blogadmin\/"}]}},"_links":{"self":[{"href":"https:\/\/blogs.dlapiper.com\/advocatus\/wp-json\/wp\/v2\/posts\/3666","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.dlapiper.com\/advocatus\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.dlapiper.com\/advocatus\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.dlapiper.com\/advocatus\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.dlapiper.com\/advocatus\/wp-json\/wp\/v2\/comments?post=3666"}],"version-history":[{"count":0,"href":"https:\/\/blogs.dlapiper.com\/advocatus\/wp-json\/wp\/v2\/posts\/3666\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blogs.dlapiper.com\/advocatus\/wp-json\/wp\/v2\/media\/2880"}],"wp:attachment":[{"href":"https:\/\/blogs.dlapiper.com\/advocatus\/wp-json\/wp\/v2\/media?parent=3666"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.dlapiper.com\/advocatus\/wp-json\/wp\/v2\/categories?post=3666"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.dlapiper.com\/advocatus\/wp-json\/wp\/v2\/tags?post=3666"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/blogs.dlapiper.com\/advocatus\/wp-json\/wp\/v2\/coauthors?post=3666"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}