Datatilsynet (Norway) · 11 October 2019
Education Agency for Oslo municipality
About: Data principles, Data security
- Regulator
- Datatilsynet (Norway)
- Decided
- 11 October 2019
- Country
- Norway
- Sector
- Not given
- Regulator’s reference
- 18/02579
- Fino case number
- 2019/NO/003
What happened
A fine of NOK 1,200,000 (approximately €120,000), reduced from NOK 2,000,000, was imposed against the Education Agency of the Municipality of Oslo due to breach of personal data security in the mobile application “Skolemelding”. The fine was issued due to the application's lack of security and subsequent violations of Article 32(1)(b) GDPR and Article 32(1)(d) GDPR and of the principle of accountability as foreseen in Article 5(2) GDPR read in conjunction with Article 5(1)(f) GDPR.
Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 5Principles relating to processing of personal data5(1)(f) · 5(2)Read →
- Art. 32Security of processing32(1)(b) · 32(1)(d)Read →
- Data principles
- Data security
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2019/NO/003.