29
Fri, Mar
50 New Articles

Hungarian Privacy Watchdog Fines Over Cookies and Declares IAB Europe TCF Illegal

Hungarian Privacy Watchdog Fines Over Cookies and Declares IAB Europe TCF Illegal

Hungary
Tools
Typography
  • Smaller Small Medium Big Bigger
  • Default Helvetica Segoe Georgia Times

The Hungarian Data Protection and Freedom of Information Authority (NAIH) recently fined a market-leading Hungarian media service provider HUF 10 million (approx. €25,000) for failing to comply with the data processing principles of lawfulness, fairness and transparency in its cookie management solution based on the Interactive Advertising Bureau (IAB) Europe's Transparency and Consent (TCF) Framework. This is the first time that the Hungarian authority has imposed a fine for cookie management issues and made it public.

The Hungarian authority made a number of important findings and determined that the use of cookies and the assignment of cookie identifiers to website visitors constitutes the processing of personal data. The website operator, as the data controller, is responsible for the modules it uses on its website, the third parties to which it transfers data and the legal basis on which it relies, and must clearly and transparently identify, describe and justify the specific processing purposes and legal grounds for the data processing.

The authority expects the design of the cookie banner to comply with the requirements of fairness and transparency. This requires disclosure of the categories of personal data processed, the relevant cookies, their purposes and functions. In this case, the authority found that an excessively long text on the banner in a small area of the screen and the process for the selection of over 700 data transfer partners also did not meet these requirements. The cookie notice disclosed essentially the same processing purposes for consent and legitimate interest, giving users the false impression that the controller could continue to process data based on its legitimate interest in the absence of consent.

The authority also stated that it must be as easy to withdraw consent as it is to give it. For example, if the button "Reject All" is only available on the second banner level in addition to the button "Accept All Cookies" on the first banner level, this requirement is not met.

The data controller argued that it had based its cookie management solution on IAB Europe's Transparency and Consent Framework, which, according to the data controller, is a market standard. However, the Hungarian authority did not accept these arguments. The Hungarian authority referred to the decision of the Belgian DPA, which had already found that IAB Europe's framework was illegal, and confirmed that the findings of that decision applied to this case as well.

This decision provides useful guidance for the design of cookie management solutions. However, the authority did not analyse the issues of dark patterns and international data transfers in the context of AdTech operations, so it is expected that practice may evolve on this point.

By Adam Liber and Tamas Bereczki, Partners, Provaris

 

Hungary Knowledge Partner

Nagy és Trócsányi was founded in 1991, turned into limited professional partnership (in Hungarian: ügyvédi iroda) in 1992, with the aim of offering sophisticated legal services. The firm continues to seek excellence in a comprehensive and modern practice, which spans international commercial and business law. 

The firm’s lawyers provide clients with advice and representation in an active, thoughtful and ethical manner, with a real understanding of clients‘ business needs and the markets in which they operate.

The firm is one of the largest home-grown independent law firms in Hungary. Currently Nagy és Trócsányi has 26 lawyers out of which there are 8 active partners. All partners are equity partners.

Nagy és Trócsányi is a legal entity and registered with the Budapest Bar Association. All lawyers of the Budapest office are either members of, or registered as clerks with, the Budapest Bar Association. Several of the firm’s lawyers are admitted attorneys or registered as legal consultants in New York.

The firm advises a broad range of clients, including numerous multinational corporations. 

Our activity focuses on the following practice areas: M&A, company law, litigation and dispute resolution, real estate law, banking and finance, project financing, insolvency and restructuring, venture capital investment, taxation, competition, utilities, energy, media and telecommunication.

Nagy és Trócsányi is the exclusive member firm in Hungary for Lex Mundi – the world’s leading network of independent law firms with in-depth experience in 100+countries worldwide.

The firm advises a broad range of clients, including numerous multinational corporations. Among our key clients are: OTP Bank, Sberbank, Erste Bank, Scania, KS ORKA, Mannvit, DAF Trucks, Booking.com, Museum of Fine Arts of Budapest, Hungarian Post Pte Ltd, Hiventures, Strabag, CPI Hungary, Givaudan, Marks & Spencer, CBA.

Firm's website.

Our Latest Issue