Hungary Hungary

Public area maintenance company

4,290 €

GDPR enforcement action by Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) on 2019-08-02.

Rank · Sector
#143
of 213 in Employment
Rank · Hungary
#35
of 75
Rank · All fines
#1,869
of 3,050

Case details

Authority
Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)
Date
2019-08-02
Controller / Processor
Public area maintenance company
Sector
Employment
Quoted Articles
Art. 5 GDPR, Art. 6 GDPR, Art. 13 GDPR
Type of violation
Non-compliance with general data processing principles

Summary

An ex-employee complained that his employer unlawfully monitored his work by its CCTV. The employer argued that CCTV monitoring was necessary to assess, whether the employee fulfilled his employment related duties (i.e. monitoring certain public areas and signalling any unusual event to his colleagues) and that the monitoring also served the protection of its surveillance system from unlawful access or usage. NAIH found that monitoring of the employee by CCTV is not an appropriate way of assessing his work performance and the employer relied on an inappropriate legal basis (public interest, official authority) regarding the CCTV operations. The employer could have protected its public area surveillance system by other methods (e.g. by installing firewalls or other security upgrades to its systems). The employer also placed only a brief notice sheet at the entrance of the workstation of the employee regarding the CCTV monitoring, which NAIH deemed insufficient.

Open original source Links to the regulator's original publication or another source.

Related fines