Increasingly strict e-commerce audits since 2024. Typical first fine: €8-40k, repeat violations up to 4% of annual revenue. Most common findings: deficient cookie banner (only 'Accept' button), English-only privacy policy, Google Analytics without proper data-transfer agreement.
Related terms
DPIA (Data Protection Impact Assessment)
A GDPR document required for any business doing 'high-risk' data processing.
DPA and TIA (data processing and transfer impact assessment)
Two mandatory GDPR documents for any business handling personal data.
Data breach notification (Hungarian NAIH 72 hours)
Under GDPR, every business must report personal-data breaches (unauthorised disclosure, destruction, alteration) to NAIH within 72 hours - through Hungary's adatvedelem.hu portal.
Sütibanner (Hungarian cookie consent banner)
The pop-up that asks for consent to place cookies on a website.
The bench this belongs to
CybersecurityPurple Team: the same person writes the exploit and closes the hole. Most agencies only harden, which means hardening against a threat nobody tested.
