Datatilsynet (Norway) · 24 March 2020
Not named in the source
About: Accountability, Data principles, Transparency, Unlawful processing
- Regulator
- Datatilsynet (Norway)
- Decided
- 24 March 2020
- Country
- Norway
- Sector
- Not given
- Regulator’s reference
- 19/02450
- Fino case number
- 2020/NO/025
What happened
A data subject lodged a complaint against the Norwegian DPA alleging several GDPR violations. A third party was appointed to handle the case, since the DPA itself cannot handle complaints filed against it. The appointed representative held that the DPA violated Article 13 GDPR for failing to specify the legitimate interests for processing personal data on their website.
Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 5Principles relating to processing of personal data5(1) · 5(1)(a) · 5(1)(b) · 5(2)Read →
- Art. 6Lawfulness of processing6(1)(f)Read →
- Art. 12Transparent information, communication and modalities for the exercise of the rights of the data subject12(1) · 12(2) · 12(4)Read →
- Art. 13Information to be provided where personal data are collected from the data subject13(1)(d)Read →
- Art. 24Responsibility of the controllerRead →
- Art. 57Tasks57(1)(b) · 57(2)Read →
- Art. 70Tasks of the Board70(1)Read →
- Accountability
- Data principles
- Transparency
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2020/NO/025.