Hungary

Directorate of Social and Child Welfare Institutions of the Ferencvaros District of Budapest

286 €

GDPR enforcement action by Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) on 2019-05-21.

Rank · Sector

#356

of 357 in Public Sector and Education

Rank · Hungary

#73

of 75

Rank · All fines

#2,997

of 3,050

Case details

Authority: Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)
Date: 2019-05-21
Controller / Processor: Directorate of Social and Child Welfare Institutions of the Ferencvaros District of Budapest
Sector: Public Sector and Education
Quoted Articles: Art. 33 GDPR
Type of violation: Insufficient fulfilment of data breach notification obligations

Summary

The employee of the Directorate sent by mistake 9 letters to the wrong recipient, which contained personal data of 18 data subjects (including data of children, criminal data and data related to the private life of the data subjects). The recipient informed the Directorate by telephone 5 days after the posting that it received certain letters by mistake. The Directorate notified NAIH on the data breach only weeks later.

Open original source Links to the regulator's original publication or another source.