NAIH (Hungary) - NAIH/2019/51/11: Difference between revisions
No edit summary |
(No difference)
|
Revision as of 15:23, 17 January 2020
NAIH - NAIH/2019/5112/15 | |
---|---|
Authority: | NAIH (Hungary) |
Jurisdiction: | Hungary |
Relevant Law: | Article 5(1)(e) GDPR |
Type: | Complaint |
Outcome: | Upheld |
Decided: | 11.12.2019 |
Published: | n/a |
Fine: | 1,500 EUR |
Parties: | Public sector |
National Case Number: | NAIH/2019/5112/15 |
European Case Law Identifier: | n/a |
Appeal: | n/a |
Original Language: |
Hungarian |
Original Source: | NAIH (in HU) |
The NAIH fined € 1.500 an employer in the public sector for unlawful search in archived e-mail account of former employee.
English Summary
Facts
An employer searched in the archived private e-mails of a former employee after noticing him.
Dispute
Could data controller be allowed to process non-work and work related personal data of former employee in any situation?
Holding
The NAIH decided that the employer was not allowed to process the former employee’s private correspondence in his archived business e-mail account, since it found that the content of the business e-mail account constitutes personal data of the employee. It obliged the employer to delete the not work-related (private) e-mails of the account actively cooperating with the former employee concerned. The NHAI also instructed the data controller to provide adequate protection of the personal data during the use, archiving and searching in the archived business e-mail accounts of former employees by adopting the necessary internal policies and by giving notice to data subjects. According to the decision, the processing of personal data contained in e-mail accounts should be limited to the necessary time, while the data controller must establish a clear and justified retention period. The processing of e-mails with private content even in an archived form is unlawful if there is no adequate legal basis for the processing. However, the DPA acknowledged that there can be cases when selecting work-related and private e-mails is an unreasonable burden for the parties concerned and it may be impossible for them to guarantee the presence of the former employee in the procedure.
Comment
Share your comments here!
Further Resources
Share blogs or news articles here!
English Machine Translation of the Decision
The decision below is a machine translation of the original. Please refer to the German original for more details.
to be completed..