The Hungarian National Authority for Data Protection and Freedom of Information (NAIH) has issued a statement on the legality of publishing and listing personal data of employees of public bodies.

Triggered by the creation of a website listing employees of the National Office for Asset Recovery and Protection (NVVH), the authority recalls that personal data, even those whose publication is mandated by law in the public interest, remain subject to the GDPR and Act XCII of 2011 on the right to informational self-determination and freedom of information. It specifies that creating lists for discriminatory or political purposes violates the principles of lawfulness, purpose limitation, and data minimization. Employees of a public body are not considered public figures solely by virtue of their employment. Any disclosure of their data which, by its purpose or manner, allows interference with their private life or exposes them to harassment is deemed illegal. The NAIH considers that creating databases based on subjective criteria aimed at stigmatizing individuals infringes human dignity.