Norwegian Supervisory Authority (Datatilsynet) · 27 November 2023
Norwegian Labor and Welfare Administration
Insufficient technical and organisational measures to ensure information security
Fine€1,700,000Fine issued
- Regulator
- Norwegian Supervisory Authority (Datatilsynet)
- Decided
- 27 November 2023
- Country
- Norway
- Sector
- Public Sector and Education
- Regulator’s reference
- Not recorded
- Fino case number
- 2023/NO/001
What happened
The Norwegian DPA fined the Labour and Welfare Administration (NAV) €1,754,678 (NOK 20 million) and issued several orders for 12 violations, attributed to "serious neglect over an extended period" in their information security and IT systems.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 5Principles relating to processing of personal data5(1)(f) · 5(2)Read →
- Art. 24Responsibility of the controller24(1)Read →
- Art. 25Data protection by design and by default25(1)Read →
- Art. 32Security of processing32(1)(d) · 32(2)Read →
- Accountability
- Data principles
- Data security
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2023/NO/001.