Datatilsynet (Norway) · 25 February 2020
Public Roads Administration (Statens vegvesen)
About: Accountability, Data principles, Data subject rights, Unlawful processing
- Regulator
- Datatilsynet (Norway)
- Decided
- 25 February 2020
- Country
- Norway
- Sector
- Not given
- Regulator’s reference
- 18/04147
- Fino case number
- 2020/NO/024
What happened
The Norwegian DPA initially notified the Public Roads Administration of a NOK 4 million fine for failing to delete toll road crossing logs, thus violating Article 5(1) GDPR, Article 17(1)(a), Article 17(1)(d) and Article 25(1), cf. Article 5(1)(c), Article 5(1)(d), Article 5(1)(e) and Article 5(1)(f). The controller, however, contested the decision, leading the DPA to reassess the case and subsequently reduce the fine to NOK 1 million (approximately €98,000 in June 2021).
Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 5Principles relating to processing of personal data5(1)(a) · 5(1)(c) · 5(1)(d) · 5(1)(e) · 5(1)(f)Read →
- Art. 6Lawfulness of processing6(1)Read →
- Art. 17Right to erasure (‘right to be forgotten’)17(1)(a) · 17(1)(d)Read →
- Art. 25Data protection by design and by default25(1)Read →
- Accountability
- Data principles
- Data subject rights
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2020/NO/024.