Aldi supermarket fined for violating privacy laws in Hungary

Published: April 12 2023

Contents

The National Authority for Data Protection and Freedom of Information (NAIH) carried out an investigation into Aldi in 2022 concerning its practice of recording and storing data on the date of birth of customers who purchased alcohol. It was found that this practice infringed data privacy laws, and Aldi has been fined HUF 95 million (EUR 250,000) for this data breach.

Aldi’s practice of recording the date of birth of customers who purchased alcohol was not only to calculate the customer’s age. The data was then, in fact, being stored for 180 days, which means that Aldi was retaining sensitive customer data that did not relate directly to the transaction.

Aldi has received several privacy complaints from customers regarding the recording of their date of birth. Many of the complainants asked Aldi about the legal basis on which the recording was taking place, but they received no answer. This is a violation of data protection regulations, as businesses must provide customers with clear and transparent information about how their data is being collected and processed.

Businesses that operate in Hungary must take data protection seriously. The case of Aldi highlights the importance of adhering to data protection regulations and ensuring that customers’ sensitive information is collected, processed, and stored in a transparent and secure manner. Data protection laws are there to protect consumers, and businesses must ensure that they are fully compliant.