Sanction RGPD Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) — Public area maintenance company : 4 k€ (2019)

Autorité de contrôle
Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)
Pays
Hongrie
Entreprise / secteur
Public area maintenance company
Montant de l'amende
4 k€
Date de la décision
2 août 2019
Fondement juridique
Art. 5, Art. 6, Art. 13
Manquement
Non-respect des principes de traitement

Résumé des faits

An ex-employee complained that his employer unlawfully monitored his work by its CCTV. The employer argued that CCTV monitoring was necessary to assess, whether the employee fulfilled his employment related duties (i.e. monitoring certain public areas and signalling any unusual event to his colleagues) and that the monitoring also served the protection of its surveillance system from unlawful access or usage. NAIH found that monitoring of the employee by CCTV is not an appropriate way of assessing his work performance and the employer relied on an inappropriate legal basis (public interest, official authority) regarding the CCTV operations. The employer could have protected its public area surveillance system by other methods (e.g. by installing firewalls or other security upgrades to its systems). The employer also placed only a brief notice sheet at the entrance of the workstation of the employee regarding the CCTV monitoring, which NAIH deemed insufficient.

Décision officielle

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)

Évaluer votre conformité RGPD avec Data Comply One