Datatilsynet (Norway) · 18 January 2021
CyberBook AS
About: Accountability, Data subject rights, Transparency, Unlawful processing
FineNOK200,000≈ €19,300Violation found
- Regulator
- Datatilsynet (Norway)
- Decided
- 18 January 2021
- Country
- Norway
- Sector
- Not given
- Regulator’s reference
- 20/02162
- Fino case number
- 2021/NO/033
What happened
The Norwegian DPA fined a company NOK 200 000 (€19,600) for enabling automatic forwarding of a former employee's emails without a legal basis and for lack of information, ignoring several objections, not terminating the email account and for not deleting the email account and its content.
Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 6Lawfulness of processing6(1)(f)Read →
- Art. 13Information to be provided where personal data are collected from the data subjectRead →
- Art. 17Right to erasure (‘right to be forgotten’)17(1)(e)Read →
- Art. 21Right to objectRead →
- Art. 24Responsibility of the controllerRead →
- Accountability
- Data subject rights
- Transparency
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2021/NO/033.