The Court of Justice of the European Union ruled a member state's data protection authority is legally authorized to order the deletion of an individual's personal information without a formal complaint to the DPA from the data subject under the EU General Data Protection Regulation. The decision was made following a request for interpretation of Hungary's Budapest High Court after a municipal government asked the Hungarian State Treasury for residents' personal information for the purpose of issuing COVID-19 relief funds.