NAIH (Hungary) - NAIH/2019/5112/15: Difference between revisions

From GDPRhub
No edit summary
No edit summary
Line 1: Line 1:
{| class="wikitable" style="width: 25%; margin-left: 10px; float:right;"
{{DPAdecisionBOX
! colspan="2" |NAIH - NAIH/2019/5112/15
|-
| colspan="2" style="padding: 20px; background-color:#7f0037;" |[[File:logoHU.jpg|center|250px]]
|-
|Authority:||[[NAIH (Hungary)]]
[[Category:NAIH (Hungary)]]
|-
|Jurisdiction:||[[Data Protection in Hungary|Hungary]]
[[Category: Hungary]]
|-
|Relevant Law:||[[Article 5 GDPR#1d|Article 5(1)(d) GDPR]]
[[Category:Article 5(1)(d) GDPR]]


[[Article 12 GDPR#3|Article 12(3) GDPR]]
|Jurisdiction=Hungary
[[Category:Article 12(3) GDPR]]
|DPA-BG-Color=background-color:#7f0037;
|DPAlogo=LogoHU.jpg
|DPA_Abbrevation=NAIH (Hungary)
|DPA_With_Country=NAIH (Hungary)


[[Article 15 GDPR]]
|Case_Number_Name=NAIH/2019/5112/15
[[Category:Article 15 GDPR]]
|ECLI=


|-
|Original_Source_Name_1=NAIH
|Type:||Complaint
|Original_Source_Link_1=https://www.naih.hu/files/NAIH-2019-5112-hatarozat.pdf
|-
|Original_Source_Language_1=Hungarian
|Outcome:||Upheld
|Original_Source_Language__Code_1=HU
|-
|Original_Source_Name_2=
|Decided:||18.11. 2019
|Original_Source_Link_2=
[[Category:2019]]
|Original_Source_Language_2=
|-
|Original_Source_Language__Code_2=
|Published:||n/a
 
|-
|Type=Complaint
|Fine:||None
|Outcome=Upheld
|-
|Date_Started=
|Parties:||Hospital
|Date_Decided=18.11.2019
|-
|Date_Published=
|National Case Number:||NAIH/2019/5112/15
|Year=2019
|-
|Fine=None
|European Case Law Identifier:||n/a
|Currency=
|-
 
|Appeal:||n/a
|GDPR_Article_1=Article 5(1)(d) GDPR
|-
|GDPR_Article_Link_1=Article 5 GDPR#1d
|Original Language:||[[Category:Hungarian]]
|GDPR_Article_2=Article 12(3) GDPR
Hungarian
|GDPR_Article_Link_2=Article 12 GDPR#3
|-
|GDPR_Article_3=Article 15 GDPR
|Original Source:||[https://www.naih.hu/files/NAIH-2019-5112-hatarozat.pdf NAIH (in HU)]
|GDPR_Article_Link_3=Article 15 GDPR
|}
|GDPR_Article_4=
|GDPR_Article_Link_4=
|GDPR_Article_5=
|GDPR_Article_Link_5=
 
|EU_Law_Name_1=
|EU_Law_Link_1=
|EU_Law_Name_2=
|EU_Law_Link_2=
 
|National_Law_Name_1=
|National_Law_Link_1=
|National_Law_Name_2=
|National_Law_Link_2=
 
|Party_Name_1=Hospital
|Party_Link_1=
|Party_Name_2=
|Party_Link_2=
|Party_Name_3=
|Party_Link_3=
 
|Appeal_To_Body=
|Appeal_To_Case_Number_Name=
|Appeal_To_Status=
|Appeal_To_Link=
 
|Initial_Contributor=
|
}}


The NAIH confirmed that the exercice of the access right and the accuracy principle do not require to provide certified copies to the data subject.
The NAIH confirmed that the exercice of the access right and the accuracy principle do not require to provide certified copies to the data subject.

Revision as of 09:13, 10 March 2022

NAIH (Hungary) - NAIH/2019/5112/15
LogoHU.jpg
Authority: NAIH (Hungary)
Jurisdiction: Hungary
Relevant Law: Article 5(1)(d) GDPR
Article 12(3) GDPR
Article 15 GDPR
Type: Complaint
Outcome: Upheld
Started:
Decided: 18.11.2019
Published:
Fine: None
Parties: Hospital
National Case Number/Name: NAIH/2019/5112/15
European Case Law Identifier: n/a
Appeal: n/a
Original Language(s): Hungarian
Original Source: NAIH (in HU)
Initial Contributor: n/a

The NAIH confirmed that the exercice of the access right and the accuracy principle do not require to provide certified copies to the data subject.

English Summary

Facts

The applicant is a citizen who originally filed a complaint against the Hospital regarding the medical treatment he was subject to. During the investigations concerning the Hospital, the applicant requested a copy of his personal data. The hospital charged the applicant with a fee and sent a copy of the documents requested with undue delay and without certification. As a consequence, the applicant filed a complaint with the NAIH for violation of his access right.

Dispute

Could a data subect be granted of a certified copiy of his personal data under Article 15 GDPR?

Holding

The NAIH found that the data controller has failed to grant the Applicant ‘s right of access within the thirty-days limit, as required by Article 12(3). However, it rejected the applicant’s claims regarding the certified copies requested under Article 15 read in conjunction with Article 5(1)(d) GDPR. Indeed, the DPA found that these articles do not require to provide for certified copies of personal data.

Comment

Share your comments here!

Further Resources

Share blogs or news articles here!

English Machine Translation of the Decision

The decision below is a machine translation of the original. Please refer to the Hungarian original for more details.

to be completed..