Norwegian Supervisory Authority (Datatilsynet) · 16 January 2026
Timegrip AS
Insufficient fulfilment of data subjects rights
- Regulator
- Norwegian Supervisory Authority (Datatilsynet)
- Decided
- 16 January 2026
- Country
- Norway
- Sector
- Employment
- Regulator’s reference
- Not recorded
- Fino case number
- 2026/NO/001
What happened
The DPA imposed a fine of NOK 250,000 (€25,000) on a provider of a time-recording systems which claimed to be just a processor when in fact it was determining the purposes and means of the processing. Further, the provider failed to provide 80 data subjects with access to their time records after their employer went bankrupt.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
The source doesn’t list which GDPR articles were involved.
- Data subject rights
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2026/NO/001.