Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) · 16 December 2020
Not named in the source
Insufficient legal basis for data processing
- Regulator
- Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)
- Decided
- 16 December 2020
- Country
- Hungary
- Sector
- Finance, Insurance and Consulting
- Regulator’s reference
- Not recorded
- Fino case number
- 2020/HU/002
What happened
The Hungarian DPA (NAIH) held that the controller processed copies of documentation containing personal data (including health data) without a legal basis and not in line with the purpose of processing. The processing was also not in line with the controller's legal obligation to process information on the provision of childbirth incentive loan. NAIH imposed a fine of approx. €97,430.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 5Principles relating to processing of personal data5(1)(c)Read →
- Art. 6Lawfulness of processing6(1)Read →
- Art. 9Processing of special categories of personal data9(1)Read →
- Art. 12Transparent information, communication and modalities for the exercise of the rights of the data subjectRead →
- Data principles
- Special categories
- Transparency
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2020/HU/002.