Datatilsynet (Norway) · 7 December 2020
Gveik AS
About: Accountability, Data principles, Data security, Unlawful processing
- Regulator
- Datatilsynet (Norway)
- Decided
- 7 December 2020
- Country
- Norway
- Sector
- Not given
- Regulator’s reference
- 20/01896
- Fino case number
- 2020/NO/021
What happened
The Norwegian DPA (Datatilsynet) fined Gveik AS NOK 75,000 (€7,200) for subjecting the complainant to a credit rating without a legal basis under Article 6(1)(f) GDPR and for not adhering to the accountability principle as per Article 5(2). The DPA also requires that the company implement internal controls of their credit rating process as per Article 24.
Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 5Principles relating to processing of personal data5(2)Read →
- Art. 6Lawfulness of processing6(1)(f)Read →
- Art. 24Responsibility of the controllerRead →
- Art. 32Security of processingRead →
- Accountability
- Data principles
- Data security
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2020/NO/021.