Norwegian Supervisory Authority (Datatilsynet) · 1 June 2026

Elkjøp AS

Insufficient legal basis for data processing

Fine€1,820,000Fine issued

Regulator: Norwegian Supervisory Authority (Datatilsynet)
Decided: 1 June 2026
Country: Norway
Sector: Industry and Commerce
Regulator’s reference: Not recorded
Fino case number: 2026/NO/002

Export as PDF

What happened

The DPA fined a retail company NOK 20 million (€1,829,000) for relying on unspecific, insufficiently informed and forced consent for its customer club. Also, the retailer further processed customer data for ad targeting and conversion tracking without performing the required compatibility test.

Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.

Rules involved

Art. 12Transparent information, communication and modalities for the exercise of the rights of the data subject12(3)Read →

Transparency
Unlawful processing

Sources

The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.

Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2026/NO/002.