Norwegian Supervisory Authority (Datatilsynet) · 14 January 2021
Coop Finnmark SA
Insufficient legal basis for data processing
- Regulator
- Norwegian Supervisory Authority (Datatilsynet)
- Decided
- 14 January 2021
- Country
- Norway
- Sector
- Industry and Commerce
- Regulator’s reference
- Not recorded
- Fino case number
- 2021/NO/025
What happened
The Norwegian DPA fined a company €38,800 for unlawfully disclosing personal data from a surveillance footage, thus breaching Article 5(1)(a) GDPR and Article 6. The company appealed to the Norwegian Privacy Appeals Board, who first removed the fine in its entirety, then awarded the controller €6,959 to cover their legal costs.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 5Principles relating to processing of personal data5(1)(a)Read →
- Art. 6Lawfulness of processingRead →
- Data principles
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2021/NO/025.