Norwegian Supervisory Authority (Datatilsynet) · 12 January 2021
Not named in the source
Insufficient legal basis for data processing
- Regulator
- Norwegian Supervisory Authority (Datatilsynet)
- Decided
- 12 January 2021
- Country
- Norway
- Sector
- Employment
- Regulator’s reference
- Not recorded
- Fino case number
- 2021/NO/026
What happened
The Norwegian DPA fined a company €38,800 (NOK 400,000) for enabling automatic forwarding of an employee's emails during a sick leave, without informing the employee or accepting her objection. The company appealed the fine and although the Privacy Appeals Board (Personvernnemnda) agreed with the DPA that the fine was correct, they reduced it to NOK 250,000 only because of the DPA's long case processing time.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Data principles
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2021/NO/026.