The Hungarian Data Protection Authority has issued a statement
on processing of employee emails under the GDPR, providing guidance
for employers on how to ensure they are compliant.
At the end of last year, the Hungarian Data Protection Authority
('HDPA') issued a statement, in which it commits itself to
take all possible action and use all available means (including
imposing the appropriate legal consequences to prevent further
infringements) to stop the widespread practice of unlawful
processing of employee emails.
How does personal data enter the picture?
Even if an email address was provided for work purposes, it
might be used by the employee for personal matters, or third
parties might send personal emails to the address, which turns this
into a question of data privacy. Although some recommended steps
can be taken to prevent the personal use of work email addresses
(i.e. the prohibition of personal use of work assets), it does not
seem to be possible to
