- Enforcing jurisdiction
- Hungary · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Budapest Főváros Kormányhivatala XI. kerületi Hivatalát (11th District Public Health Department of the Government Office of the Capital City Budapest) – €27,700 Fine (Hungary, 2021)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
The XI District Office of Budapest was fined EUR 27,700 for sending health data in an unsecured email. They failed to protect sensitive information about Covid-19 tests. This case serves as a warning for public offices to handle personal data with care.
What happened
The XI District Office emailed unencrypted health data and contact details of tested individuals to doctors.
Who was affected
People whose health data and contact information were included in the unprotected email.
What the authority found
The Hungarian DPA found that the office did not implement necessary security measures to protect personal data.
Why this matters
This case underscores the need for strong data protection practices, especially for organizations handling sensitive health information. Public offices must ensure data is shared securely.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Review needed — 13 March 2026.
Processing notes: amount discrepancy.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Hungarian DPA (NAIH) has fined the XI District Office of the Government of Budapest EUR 27,700.The controller had emailed health data regarding Covid-19 rapid tests, as well as the contact details of the people tested, to doctors in a single Excel file, unencrypted and without any further measures to ensure confidentiality. The DPA found that the controller had failed to implement technical and organizational measures that ensured the protection of personal data. In addition, the controller failed to inform the DPA and the data subjects about the data violations.
Related Enforcement Actions (0)
No other enforcement actions found for Budapest Főváros Kormányhivatala XI. kerületi Hivatalát (11th District Public Health Department of the Government Office of the Capital City Budapest) in HU
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
24 March 2021
Authority
Nemzeti Adatvédelmi és Információszabadság Hatóság
Fine Amount
€27,700
About this data
Cite as: Cookie Fines. Budapest Főváros Kormányhivatala XI. kerületi Hivatalát (11th District Public Health Department of the Government Office of the Capital City Budapest) - Hungary (2021). Retrieved from cookiefines.eu
Last updated: