The Hungarian National Authority for Data Protection and Freedom of Information (NAIH) publishes a communication clarifying the validity requirements of consent for contact, following court decisions.

In light of the decisions of the Metropolitan Court of Budapest (17.P.22.206/2024/10) and the Metropolitan Court of Appeal of Budapest (9.Pf.20.387/2025/5-II), the authority recalls that consent must be obtained for a specific and sufficiently precise processing purpose. The courts have established that general formulations such as "subsequent contact", "request for opinion" or "sending of email" do not constitute valid purposes but mere processing operations. The data controller must therefore supplement these terms with information allowing the clear identification of the subject of the communication, such as the topic, service or activity concerned. Consent cannot be interpreted broadly and does not constitute a valid legal basis for processing with a vague purpose. To assess the real purpose, the courts have taken into account all information provided to the data subject, including the privacy policy and website notices.

The NAIH specifies that these transparency principles apply beyond consent and also concern processing based on other legal bases, particularly for marketing activities, sending newsletters or making contact. Data controllers must therefore review their activities, information documents and descriptions on their collection platforms. They must ensure that the purpose is defined precisely and understandably, that no contradictory information obscures it, and that the chosen legal basis is appropriate and justifiable. The authority announces that it will pay particular attention to compliance with these requirements during its procedures.