- Enforcing jurisdiction
- Hungary · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Unknown Company – €1,430 Fine (Hungary, 2019)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
An unnamed company was fined for accessing a former employee's email without their knowledge. This action raised privacy concerns, as the ex-employee had no chance to manage their personal information. The fine of EUR 1,430 stresses the importance of respecting former employees' privacy.
What happened
The company accessed a former director's email account without notifying them.
Who was affected
The former director whose private data was accessed without consent.
What the authority found
The authority found that the company violated GDPR by not allowing the former employee to manage their personal data.
Why this matters
This case highlights that companies must have clear policies for handling former employees' data. Businesses should ensure privacy practices are followed even after employment ends.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Review needed — 16 March 2026.
Processing notes: articles corrected, amount discrepancy.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The employer restored the mailbox of a director who had left the company a year before and found an email containing a work-related document. The director received no warning that his former inbox would be activated and did not have a chance to copy / delete his private data (passwords and financial information). According to NAIH, an employee or a representative should be present when the employee's data is being accessed, even if the employment has been terminated. Employees should be able to request a copy or the deletion of their private data. Employers must record the access with minutes and photos; when the employee cannot be present, then in the presence of independent witnesses. Employers must adopt internal policies on archiving and the use of IT assets and e-mail accounts, including procedural rules such as the steps of an inspection and the officials authorised to carry it out.
Related Enforcement Actions (1)
Other enforcement actions involving Unknown Company in HU
Details
Fine Date
11 December 2019
Authority
Nemzeti Adatvédelmi és Információszabadság Hatóság
Fine Amount
€1,430
About this data
Cite as: Cookie Fines. Unknown Company - Hungary (2019). Retrieved from cookiefines.eu
Last updated: