NAIH (Hungary) - NAIH/2019/51/11: Difference between revisions

From GDPRhub
No edit summary
No edit summary
Line 1: Line 1:
{| class="wikitable" style="width: 25%; margin-left: 10px; float:right;"
{{DPAdecisionBOX
! colspan="2" |NAIH - NAIH/2019/5112/15
|-
| colspan="2" style="padding: 20px; background-color:#7f0037;" |[[File:logoHU.jpg|center|250px]]
|-
|Authority:||[[NAIH (Hungary)]]
[[Category:NAIH (Hungary)]]
|-
|Jurisdiction:||[[Data Protection in Hungary|Hungary]]
[[Category: Hungary]]
|-
|Relevant Law:||[[Article 5 GDPR#1e|Article 5(1)(e) GDPR]]
[[Category:Article 5(1)(e) GDPR]]


[[Article 5 GDPR#1f|Article 5(1)(f) GDPR]]
|Jurisdiction=Hungary
[[Category:Article 5(1)(f) GDPR]]
|DPA-BG-Color=background-color:#7f0037;
|DPAlogo=LogoHU.jpg
|DPA_Abbrevation=NAIH (Hungary)
|DPA_With_Country=NAIH (Hungary)


|-
|Case_Number_Name=NAIH/2019/5112/15
|Type:||Complaint
|ECLI=
|-
 
|Outcome:||Upheld
|Original_Source_Name_1=NAIH
|-
|Original_Source_Link_1=https://www.naih.hu/files/NAIH-2019-51-hatarozat.pdf
|Decided:||11.12.2019
|Original_Source_Language_1=Hungarian
[[Category:2019]]
|Original_Source_Language__Code_1=HU
|-
|Original_Source_Name_2=
|Published:|| n/a
|Original_Source_Link_2=
|-
|Original_Source_Language_2=
|Fine:||1,500 EUR
|Original_Source_Language__Code_2=
|-
 
|Parties:||Public sector
|Type=Complaint
|-
|Outcome=Upheld
|National Case Number:||NAIH/2019/5112/15
|Date_Started=
|-
|Date_Decided=11.12.2019
|European Case Law Identifier:||n/a
|Date_Published=
|-
|Year=2019
|Appeal:||n/a
|Fine=1,500
|-
|Currency=EUR
|Original Language:||[[Category:Hungarian]]
 
Hungarian
|GDPR_Article_1=Article 5(1)(e) GDPR
|-
|GDPR_Article_Link_1=Article 5 GDPR#1e
|Original Source:||[https://www.naih.hu/files/NAIH-2019-51-hatarozat.pdf NAIH (in HU)]
|GDPR_Article_2=Article 5(1)(f) GDPR
|}
|GDPR_Article_Link_2=Article 5 GDPR#1f
|GDPR_Article_3=
|GDPR_Article_Link_3=
|GDPR_Article_4=
|GDPR_Article_Link_4=
 
|EU_Law_Name_1=
|EU_Law_Link_1=
|EU_Law_Name_2=
|EU_Law_Link_2=
 
|National_Law_Name_1=
|National_Law_Link_1=
|National_Law_Name_2=
|National_Law_Link_2=
 
|Party_Name_1=Public sector
|Party_Link_1=
|Party_Name_2=
|Party_Link_2=
|Party_Name_3=
|Party_Link_3=
 
|Appeal_To_Body=
|Appeal_To_Case_Number_Name=
|Appeal_To_Status=
|Appeal_To_Link=
 
|Initial_Contributor=
|
}}


The NAIH fined € 1.500 an employer in the public sector for unlawful search in archived e-mail account of former employee.
The NAIH fined € 1.500 an employer in the public sector for unlawful search in archived e-mail account of former employee.

Revision as of 14:02, 10 March 2022

NAIH (Hungary) - NAIH/2019/5112/15
LogoHU.jpg
Authority: NAIH (Hungary)
Jurisdiction: Hungary
Relevant Law: Article 5(1)(e) GDPR
Article 5(1)(f) GDPR
Type: Complaint
Outcome: Upheld
Started:
Decided: 11.12.2019
Published:
Fine: 1,500 EUR
Parties: Public sector
National Case Number/Name: NAIH/2019/5112/15
European Case Law Identifier: n/a
Appeal: n/a
Original Language(s): Hungarian
Original Source: NAIH (in HU)
Initial Contributor: n/a

The NAIH fined € 1.500 an employer in the public sector for unlawful search in archived e-mail account of former employee.

English Summary

Facts

An employer searched in the archived private e-mails of a former employee after noticing him.

Dispute

Could data controller be allowed to process non-work and work related personal data of former employee in any situation?

Holding

The NAIH decided that the employer was not allowed to process the former employee’s private correspondence in his archived business e-mail account, since it found that the content of the business e-mail account constitutes personal data of the employee. It obliged the employer to delete the not work-related (private) e-mails of the account actively cooperating with the former employee concerned. The NHAI also instructed the data controller to provide adequate protection of the personal data during the use, archiving and searching in the archived business e-mail accounts of former employees by adopting the necessary internal policies and by giving notice to data subjects. According to the decision, the processing of personal data contained in e-mail accounts should be limited to the necessary time, while the data controller must establish a clear and justified retention period. The processing of e-mails with private content even in an archived form is unlawful if there is no adequate legal basis for the processing. However, the DPA acknowledged that there can be cases when selecting work-related and private e-mails is an unreasonable burden for the parties concerned and it may be impossible for them to guarantee the presence of the former employee in the procedure.

Comment

Share your comments here!

Further Resources

Share blogs or news articles here!

English Machine Translation of the Decision

The decision below is a machine translation of the original. Please refer to the Hungarian original for more details.

to be completed..