Datatilsynet (Norway) · 16 November 2020
Indre Østfold kommune (municipality)
About: Data principles, Data security, Unlawful processing
FineNOK200,000≈ €18,600Violation found
- Regulator
- Datatilsynet (Norway)
- Decided
- 16 November 2020
- Country
- Norway
- Sector
- Not given
- Regulator’s reference
- 20/01984
- Fino case number
- 2020/NO/020
What happened
The Norwegian DPA (Datatilsynet) fined Indre Østfold municipality €18,860 for publishing a former student's school folder openly on their website, therefore breaching Articles 32(1)(b), (5), and (6) of the GDPR.
Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 5Principles relating to processing of personal dataRead →
- Art. 6Lawfulness of processingRead →
- Art. 32Security of processing32(1)(b)Read →
- Data principles
- Data security
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2020/NO/020.