Hungary

Elektronikus Egészségügyi Szolgáltatási Tér

1,400 €

GDPR enforcement action by Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) on 2026-05-20.

Rank · Sector

#245

of 270 in Health Care

Rank · Hungary

#62

of 75

Rank · All fines

#2,544

of 3,050

Case details

Authority: Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)
Date: 2026-05-20
Controller / Processor: Elektronikus Egészségügyi Szolgáltatási Tér
Sector: Health Care
Quoted Articles: Art. 5 (2) GDPR, Art. 6 (1) GDPR, Art. 9 (2) GDPR, Art 12 (2) GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Hungarian DPA has imposed a fine of EUR 1,400 on Elektronikus Egészségügyi Szolgáltatási Tér. The controller, an electronic health record provider, failed to prevent a former general practitioner from continuing to access the health data in 47 cases. The controller also failed to respond to a data access request from the data subject.

Open original source Links to the regulator's original publication or another source.