In recent years, there has been a growing number of cases in which employees challenge employer measures not only in labour disputes, but also seek non-pecuniary damages by invoking violations of personality rights and data protection rules.
The social security booklet (TB-kiskönyv), a document long established in the Hungarian legal system for recording social security entitlements, will soon become a thing of the past. In May 2025, the Hungarian Parliament adopted a legislative amendment that provides for the phasing out of the social security booklet. The aim is to reduce administrative burdens and prioritize digital data processing. According to the new law, the paper-based social security booklet will be discontinued and fully replaced by an electronic register, the so-called “e-social security booklet,” which will include an expanded data set compared to the traditional booklet.
The European Union’s Artificial Intelligence (AI) regulation establishes a comprehensive framework for the safe and ethical use of AI applications. Regulation 2024/1689 of the European Parliament and Council (AI Regulation), …
On 26 September 2024, regulations regarding occupational health examinations were announced, which will come into effect two days after their announcement, i.e., on 28 September 2024. The current issue of …
From 1 September 2024, the regime for mandatory occupational health examinations will change: the obligation to undergo an occupational health examination will no longer be comprehensive, as
(i) legislation will specify the specific jobs for which an occupational health examination is mandatory, and
(ii) in other cases, it will be up to the employer to decide whether to require an occupational health examination
According to the NAIH’s report on the year 2023, the data protection authority imposed a HUF 40,000,000 data protection fine on a data controller for trying to pass on data security obligations to data subjects [NAIH-109/2023].The data controller required data subjects to send documents containing bank data to it in a password-protected, secure manner, instead of the data controller itself setting up the conditions for secure data sharing.
In a decision published in June 2024, Sweden’s data protection authority, Integritetsskyddsmyndigheten (IMY), fined Avanza Bank SEK15 million (EUR 1.3 m) for its alleged use of a tracking pixel to send excessive personal data (information about, for example, customers’ securities holdings and account numbers) to the social media company Meta. The IMY said the bank did not take appropriate security measures under the EU General Data Protection Regulation (GDPR) to prevent the transfer of personal data.
On 27 December 2023, the French Data Protection Authority (CNIL) imposed a fine of €32 million on AMAZON FRANCE LOGISTIQUE. The main reason for the fine was that Amazon had set up an excessively intrusive system for monitoring the activities and performance of its employees.
So far, we have mostly read about the gigantic fines imposed by foreign data protection authorities on tech giants (Google, Amazon, Meta) in connection with cookies. Simple website operators have waited until the last possible moment – for economic reasons – to continue their illegal practices without risk.
