Datatilsynet (Norway) · 9 January 2023
Church of Norway - Den norske kirke
About: Data subject rights, Special categories, Transparency, Unlawful processing
FineNo fineViolation found
- Regulator
- Datatilsynet (Norway)
- Decided
- 9 January 2023
- Country
- Norway
- Sector
- Not given
- Regulator’s reference
- 20/01772
- Fino case number
- 2023/NO/006
What happened
The Norwegian DPA reprimanded the Church of Norway for unlawfully collecting information on members' newborns after their legal basis for such processing had expired, and for failing to provide sufficient information as per Articles 14(1)(d), 14(2)(f) and 12(1) GDPR.
Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 6Lawfulness of processing6(1) · 6(1)(c) · 6(1)(e) · 6(3)Read →
- Art. 9Processing of special categories of personal data9(2)(d) · 9(2)(g)Read →
- Art. 12Transparent information, communication and modalities for the exercise of the rights of the data subject12(1)Read →
- Art. 14Information to be provided where personal data have not been obtained from the data subject14(1)(d) · 14(2)(f) · 14(5)(c)Read →
- Art. 17Right to erasure (‘right to be forgotten’)17(1)(d)Read →
- Art. 58Powers58(2)(b)Read →
- Data subject rights
- Special categories
- Transparency
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2023/NO/006.