Mayor's Office of the city of Kecdkemét
GDPR enforcement action by Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) on 2019-02-28.
Case details
- Authority
- Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)
- Date
- 2019-02-28
- Controller / Processor
- Mayor's Office of the city of Kecdkemét
- Sector
- Public Sector and Education
- Quoted Articles
- Art. 5 (1) a) GDPR, Art. 6 GDPR
- Type of violation
- Insufficient legal basis for data processing
Summary
The fine was imposed on the Mayor’s Office of the city of Kecskemét for unlawful disclosure of the personal information of a whistleblower.NAIH imposed the fine after an employee of an organisation that it supervised reported a public interest complaint directly to it against his employer. After the organisation learned of the complaint, it requested details in order to investigate, and the local government accidentally revealed the complainant's name. The NAIH considered it an aggravating factor that as a result of the data breach, the organisation fired the person who made the report.