NAIH - NAIH/2019/51/11

From GDPRhub
NAIH - NAIH/2019/5112/15
LogoHU.jpg
Authority: NAIH (Hungary)
Jurisdiction: Hungary
Relevant Law: Article 5(1)(e) GDPR

Article 5(1)(f) GDPR

Type: Complaint
Outcome: Upheld
Decided: 11.12.2019
Published: n/a
Fine: 1,500 EUR
Parties: Public sector
National Case Number: NAIH/2019/5112/15
European Case Law Identifier: n/a
Appeal: n/a
Original Language:

Hungarian

Original Source: NAIH (in HU)

The NAIH fined € 1.500 an employer in the public sector for unlawful search in archived e-mail account of former employee.

English Summary[edit | edit source]

Facts[edit | edit source]

An employer searched in the archived private e-mails of a former employee after noticing him.

Dispute[edit | edit source]

Could data controller be allowed to process non-work and work related personal data of former employee in any situation?

Holding[edit | edit source]

The NAIH decided that the employer was not allowed to process the former employee’s private correspondence in his archived business e-mail account, since it found that the content of the business e-mail account constitutes personal data of the employee. It obliged the employer to delete the not work-related (private) e-mails of the account actively cooperating with the former employee concerned. The NHAI also instructed the data controller to provide adequate protection of the personal data during the use, archiving and searching in the archived business e-mail accounts of former employees by adopting the necessary internal policies and by giving notice to data subjects. According to the decision, the processing of personal data contained in e-mail accounts should be limited to the necessary time, while the data controller must establish a clear and justified retention period. The processing of e-mails with private content even in an archived form is unlawful if there is no adequate legal basis for the processing. However, the DPA acknowledged that there can be cases when selecting work-related and private e-mails is an unreasonable burden for the parties concerned and it may be impossible for them to guarantee the presence of the former employee in the procedure.

Comment[edit | edit source]

Share your comments here!

Further Resources[edit | edit source]

Share blogs or news articles here!

English Machine Translation of the Decision[edit | edit source]

The decision below is a machine translation of the original. Please refer to the Hungarian original for more details.

to be completed..