Datatilsynet (Norway) · 15 March 2022
Redacted
About: Accountability, Data subject rights, Transparency, Unlawful processing
FineNOK100,000≈ €10,200Violation found
- Regulator
- Datatilsynet (Norway)
- Decided
- 15 March 2022
- Country
- Norway
- Sector
- Not given
- Regulator’s reference
- 20/02368
- Fino case number
- 2022/NO/015
What happened
The Norwegian DPA fined a company €9,775 for unlawfully enabling automatic forwarding of an employee's emails in violation of Article 6(1)(f), for lack of information as per Article 13, failure to assess their objection as per Article 21, and required them to improve internals controls for employee emails as per Article 24 GDPR.
Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 6Lawfulness of processing6(1)(f)Read →
- Art. 13Information to be provided where personal data are collected from the data subjectRead →
- Art. 21Right to objectRead →
- Art. 24Responsibility of the controllerRead →
- Accountability
- Data subject rights
- Transparency
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2022/NO/015.