NAIH - NAIH/2019/5112/15

From GDPRhub
Revision as of 13:33, 23 March 2020 by GDPRhubVolunteers (talk | contribs)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
NAIH - NAIH/2019/5112/15
LogoHU.jpg
Authority: NAIH (Hungary)
Jurisdiction: Hungary
Relevant Law: Article 5(1)(d) GDPR

Article 12(3) GDPR

Article 15 GDPR

Type: Complaint
Outcome: Upheld
Decided: 18.11. 2019
Published: n/a
Fine: None
Parties: Hospital
National Case Number: NAIH/2019/5112/15
European Case Law Identifier: n/a
Appeal: n/a
Original Language:

Hungarian

Original Source: NAIH (in HU)

The NAIH confirmed that the exercice of the access right and the accuracy principle do not require to provide certified copies to the data subject.

English Summary

Facts

The applicant is a citizen who originally filed a complaint against the Hospital regarding the medical treatment he was subject to. During the investigations concerning the Hospital, the applicant requested a copy of his personal data. The hospital charged the applicant with a fee and sent a copy of the documents requested with undue delay and without certification. As a consequence, the applicant filed a complaint with the NAIH for violation of his access right.

Dispute

Could a data subect be granted of a certified copiy of his personal data under Article 15 GDPR?

Holding

The NAIH found that the data controller has failed to grant the Applicant ‘s right of access within the thirty-days limit, as required by Article 12(3). However, it rejected the applicant’s claims regarding the certified copies requested under Article 15 read in conjunction with Article 5(1)(d) GDPR. Indeed, the DPA found that these articles do not require to provide for certified copies of personal data.

Comment

Share your comments here!

Further Resources

Share blogs or news articles here!

English Machine Translation of the Decision

The decision below is a machine translation of the original. Please refer to the Hungarian original for more details.

to be completed..