- Enforcing jurisdiction
- Hungary · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Hospital – Complaint Upheld (Hungary, 2019)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
A complaint against a hospital was upheld because the hospital took too long to provide a copy of a person's medical data. This is important because it reinforces the right of individuals to access their personal data promptly. It also clarifies that while hospitals must provide access, they are not required to give certified copies.
What happened
The hospital failed to provide a copy of a person's personal data within the required thirty-day limit.
Who was affected
A citizen who requested access to their medical data from the hospital.
What the authority found
The authority ruled that the hospital violated the person's right of access by delaying the response but did not require certified copies of the data.
Why this matters
This case emphasizes the need for timely responses to data access requests, reminding healthcare providers to streamline their processes. It also clarifies the limitations on what individuals can expect regarding certified copies of their data.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 21 March 2026.
Processing notes: articles corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The applicant is a citizen who originally filed a complaint against the Hospital regarding the medical treatment he was subject to. During the investigations concerning the Hospital, the applicant requested a copy of his personal data. The hospital charged the applicant with a fee and sent a copy of the documents requested with undue delay and without certification. As a consequence, the applicant filed a complaint with the NAIH for violation of his access right. Could a data subect be granted of a certified copiy of his personal data under Article 15 GDPR? The NAIH found that the data controller has failed to grant the Applicant ‘s right of access within the thirty-days limit, as required by Article 12(3). However, it rejected the applicant’s claims regarding the certified copies requested under Article 15 read in conjunction with Article 5(1)(d) GDPR. Indeed, the DPA found that these articles do not require to provide for certified copies of personal data.
Outcome
Complaint Upheld
A data subject complaint that was upheld by the DPA.
Related Enforcement Actions (0)
No other enforcement actions found for Hospital in HU
This is the only recorded action for this entity in this jurisdiction.
Details
Decision Date
18 November 2019
Authority
Nemzeti Adatvédelmi és Információszabadság Hatóság
GDPRhub ID
gdprhub-1580About this data
Cite as: Cookie Fines. Hospital - Hungary (2019). Retrieved from cookiefines.eu
Last updated: