Company

€1,400

Insufficient legal basis for data processing

Karar Tarihi

27 Nisan 2021

Otorite

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)

HU

Sektör

Industry and Commerce

Ülke

HU

Hukuk

GDPR

Durum

FINAL

Açıklama

The Hungarian DPA (NAIH) has imposed a fine of EUR 1,400 on a company. In the course of his professional activities, a data subject had made a telephone call to the controller on September 23, 2019. The controller had recorded the conversation without informing the data subject or obtaining his consent and then provided it to the company where the data subject was employed. The employer of the data subject subsequently terminated his employment because the recorded telephone call apparently did not meet the company's service and professional standards. The DPA finds that the controller not only processed the data subject's data without a legal basis, but also breached its accountability obligation by failing to demonstrate the lawfulness of the processing. In addition, the controller violated its duty to provide information under Art. 13 GDPR.

Yasal Atıflar

Art. 5 (1)Art. 6Art. 13

Sorunlar & İhlaller

Insufficient legal basis for data processing

Gizlilik Uygulamasından Haberdar Olun

Gizliliğinize saygı duyuyoruz. Ayda bir e-posta, spam yok, istediğiniz zaman abonelikten çıkın.