Norwegian Supervisory Authority (Datatilsynet) · 27 September 2021
Ferde AS
Non-compliance with general data processing principles
Fine€496,000Fine issued
- Regulator
- Norwegian Supervisory Authority (Datatilsynet)
- Decided
- 27 September 2021
- Country
- Norway
- Sector
- Public Sector and Education
- Regulator’s reference
- Not recorded
- Fino case number
- 2021/NO/009
What happened
The Norwegian DPA fined a road toll company about €499,373 (NOK 5,000,000) for not having a data processing agreement, risk assessment and transfer mechanism in place for transferring about 12,5 million car plate numbers to China, breaching Articles 5, 24, 32 and 44 GDPR.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 5Principles relating to processing of personal data5(1)(f) · 5(2)Read →
- Art. 28Processor28(3)Read →
- Art. 32Security of processing32(2)Read →
- Art. 44General principle for transfersRead →
- Data principles
- Data security
- International transfers
- Processor obligations
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2021/NO/009.