Sun, Jul
68 New Articles

Change in the NAIH’s Practice Regarding Copying Employee Files

Change in the NAIH’s Practice Regarding Copying Employee Files

  • Smaller Small Medium Big Bigger
  • Default Helvetica Segoe Georgia Times

The Hungarian Data Protection Authority (NAIH) recently issued a new guidance on the making and keeping of copies of employees' qualifications to comply with ISO 9001:2015 quality management standards.

While the NAIH is of the view that compliance with ISO 9001:2015 does not entitle the employer to make copies of employees' qualifications, the NAIH has reversed its previous practice and states that employers may make copies of physical documents and employee files that contain personal data, as long as the employer may lawfully process the personal data contained in the relevant documents.

While the Hungarian Labour Code does not generally authorise an employer to make copies of an employee's documents, as an employer - as a general rule - an employer may not oblige an employee to do anything more than merely request the production of such documents. The NAIH's previous practice was in principle not to make copies of employees' files, unless it was necessary to comply with a specific legal obligation [e.g. for payroll purposes]. In addition, the NAIH did not consider the employee's consent to the copying of the employee's records for HR purposes to be lawful, as there were no voluntary conditions attached to the consent; the NAIH also did not consider a simple (scanned) copy to be adequate to ensure the quality of the data and therefore denied that the employer had a prevailing legitimate interest in obtaining a scanned copy, as the NAIH considered that the mere presentation of an identity card or document, the verification of its validity or the employer's recording of this fact and the number of the document was sufficient for this purpose.

Now, in its new guidance, the NAIH argues that making copies of documents is not a new purpose of data processing, but merely a new means of processing the same personal data already processed by the employer. Therefore, the NAIH narrows its interpretation and says that only documents containing personal data that the employer already processes in connection with the establishment and maintenance of the employment relationship with employees can be copied and stored for data quality purposes. Employers may need to redact personal data on copies of documents that they do not have a valid legal basis to process, such as the image of the employee regarding identity cards.

By Adam Liber and Tamas Bereczki, Partners, Provaris


Hungary Knowledge Partner

Nagy és Trócsányi was founded in 1991, turned into limited professional partnership (in Hungarian: ügyvédi iroda) in 1992, with the aim of offering sophisticated legal services. The firm continues to seek excellence in a comprehensive and modern practice, which spans international commercial and business law. 

The firm’s lawyers provide clients with advice and representation in an active, thoughtful and ethical manner, with a real understanding of clients‘ business needs and the markets in which they operate.

The firm is one of the largest home-grown independent law firms in Hungary. Currently Nagy és Trócsányi has 26 lawyers out of which there are 8 active partners. All partners are equity partners.

Nagy és Trócsányi is a legal entity and registered with the Budapest Bar Association. All lawyers of the Budapest office are either members of, or registered as clerks with, the Budapest Bar Association. Several of the firm’s lawyers are admitted attorneys or registered as legal consultants in New York.

The firm advises a broad range of clients, including numerous multinational corporations. 

Our activity focuses on the following practice areas: M&A, company law, litigation and dispute resolution, real estate law, banking and finance, project financing, insolvency and restructuring, venture capital investment, taxation, competition, utilities, energy, media and telecommunication.

Nagy és Trócsányi is the exclusive member firm in Hungary for Lex Mundi – the world’s leading network of independent law firms with in-depth experience in 100+countries worldwide.

The firm advises a broad range of clients, including numerous multinational corporations. Among our key clients are: OTP Bank, Sberbank, Erste Bank, Scania, KS ORKA, Mannvit, DAF Trucks, Booking.com, Museum of Fine Arts of Budapest, Hungarian Post Pte Ltd, Hiventures, Strabag, CPI Hungary, Givaudan, Marks & Spencer, CBA.

Firm's website.

Our Latest Issue