Hungary

Health insurance provider

1,200 €

GDPR enforcement action by Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) on 2022-09-25.

Rank · Sector

#246

of 270 in Health Care

Rank · Hungary

#66

of 75

Rank · All fines

#2,559

of 3,050

Case details

Authority: Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)
Date: 2022-09-25
Controller / Processor: Health insurance provider
Sector: Health Care
Quoted Articles: Art. 5 (1) a) GDPR, Art. 5 (2) GDPR, Art. 12 (3), (4) GDPR, Art. 31 GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Hungarian DPA has imposed a fine of EUR 1,200 on a health insurance provider.
The insurer had published the result of a Covid-19 test of the data subject on its website. This would have allowed unauthorized persons to access the personal data of the data subject. In addition, the insurer had not adequately cooperated with the agency during the DPA's investigation.

Open original source Links to the regulator's original publication or another source.