NAIH (Hungary) - NAIH/2019/51/11

From GDPRhub
Revision as of 15:23, 17 January 2020 by Juliette Leportois (talk | contribs)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
NAIH - NAIH/2019/5112/15
LogoHU.jpg
Authority: NAIH (Hungary)
Jurisdiction: Hungary
Relevant Law: Article 5(1)(e) GDPR

Article 5(1)(f) GDPR

Type: Complaint
Outcome: Upheld
Decided: 11.12.2019
Published: n/a
Fine: 1,500 EUR
Parties: Public sector
National Case Number: NAIH/2019/5112/15
European Case Law Identifier: n/a
Appeal: n/a
Original Language:

Hungarian

Original Source: NAIH (in HU)

The NAIH fined € 1.500 an employer in the public sector for unlawful search in archived e-mail account of former employee.

English Summary

Facts

An employer searched in the archived private e-mails of a former employee after noticing him.

Dispute

Could data controller be allowed to process non-work and work related personal data of former employee in any situation?

Holding

The NAIH decided that the employer was not allowed to process the former employee’s private correspondence in his archived business e-mail account, since it found that the content of the business e-mail account constitutes personal data of the employee. It obliged the employer to delete the not work-related (private) e-mails of the account actively cooperating with the former employee concerned. The NHAI also instructed the data controller to provide adequate protection of the personal data during the use, archiving and searching in the archived business e-mail accounts of former employees by adopting the necessary internal policies and by giving notice to data subjects. According to the decision, the processing of personal data contained in e-mail accounts should be limited to the necessary time, while the data controller must establish a clear and justified retention period. The processing of e-mails with private content even in an archived form is unlawful if there is no adequate legal basis for the processing. However, the DPA acknowledged that there can be cases when selecting work-related and private e-mails is an unreasonable burden for the parties concerned and it may be impossible for them to guarantee the presence of the former employee in the procedure.

Comment

Share your comments here!

Further Resources

Share blogs or news articles here!

English Machine Translation of the Decision

The decision below is a machine translation of the original. Please refer to the German original for more details.

to be completed..