Datatilsynet (Norway) · 7 June 2021
Company
Name not published.
About: Accountability, Data principles, Data subject rights, Transparency, Unlawful processing
- Regulator
- Datatilsynet (Norway)
- Decided
- 7 June 2021
- Country
- Norway
- Sector
- Not given
- Regulator’s reference
- 20/02274
- Fino case number
- 2021/NO/042
What happened
The Norwegian DPA fined a company approximately €14,700 (NOK 150,000) for taking over an employee's work email account during her notice period without warning her, without giving her the opportunity to delete personal content, and despite her objection, thereby violating Articles 6(1)(f), 13, 17(1)(e), and 21 GDPR.
Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 5Principles relating to processing of personal data5(1)(a) · 5(1)(e) · 5(2)Read →
- Art. 6Lawfulness of processing6(1)(f)Read →
- Art. 13Information to be provided where personal data are collected from the data subjectRead →
- Art. 17Right to erasure (‘right to be forgotten’)17(1)(e)Read →
- Art. 21Right to objectRead →
- Art. 24Responsibility of the controllerRead →
- Accountability
- Data principles
- Data subject rights
- Transparency
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2021/NO/042.