Enforcing jurisdiction
Hungary · Geography does not establish applicable law.
Confirmed applicable legislation
Privacy topics

Health insurance provider – €1,200 Fine (Hungary, 2022)

€1,200Nemzeti Adatvédelmi és Információszabadság Hatóság25 September 2022Hungary
final
Fine

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

A health insurance provider in Hungary was fined EUR 1,200 for improperly publishing a Covid-19 test result on its website. This allowed unauthorized access to personal health information, which is a serious violation of privacy. The case underscores the need for companies to protect sensitive data and cooperate with regulatory authorities.

What happened

The health insurance provider published a Covid-19 test result online, exposing personal data to unauthorized individuals.

Who was affected

The individual whose Covid-19 test result was published was affected.

What the authority found

The Hungarian DPA imposed a fine because the insurer failed to protect personal data and did not cooperate adequately during the investigation.

Why this matters

This case serves as a warning to health-related companies about the importance of safeguarding personal information and complying with data protection regulations.

Recorded legal citations
Automatically processed
Art. 31 GDPR
Art. 5(1)(a) GDPR
Art. 5(2) GDPR
Art. 12(3) GDPR
View original scraped data
Art. 5(1) a) GDPR
Art. 5(2) GDPR
Art. 12(3) GDPR
(4) GDPR
Art. 31(GDPR)

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Linked-source text retrieved.

Review needed — 16 March 2026.

Processing notes: amount discrepancy.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The Hungarian DPA has imposed a fine of EUR 1,200 on a health insurance provider. The insurer had published the result of a Covid-19 test of the data subject on its website. This would have allowed unauthorized persons to access the personal data of the data subject. In addition, the insurer had not adequately cooperated with the agency during the DPA's investigation.

Related Enforcement Actions (0)

No other enforcement actions found for Health insurance provider in HU

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

25 September 2022

Authority

Nemzeti Adatvédelmi és Információszabadság Hatóság

Fine Amount

€1,200

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Health insurance provider - Hungary (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: