Bergen Municipality – €276,000 Fine (Norway, 2020)

€276,000Datatilsynet (Norway)3 September 2020Norway
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Norway's data protection authority fined Bergen Municipality €276,000 for not properly securing a communication tool used by schools. This is important because it shows how critical it is to protect personal data in educational settings. Schools and similar institutions need to ensure their systems are secure to prevent data breaches.

What happened

Bergen Municipality failed to secure a school communication tool, leading to a data breach.

Who was affected

Students and parents using Bergen Municipality's school communication tool, Vigilo, were affected by the data breach.

What the authority found

The Norwegian authority found that Bergen Municipality did not adequately protect personal data, violating GDPR's security requirements.

Why this matters

This case highlights the responsibility of educational institutions to secure personal data and the potential consequences of failing to do so, serving as a warning for similar organizations to prioritize data security.

GDPR Articles Cited

AI-verified

Art. 32 GDPR
Art. 5(1)(f) GDPR
View original scraped data
Art. 5(1)(f) GDPR
Art. 32 GDPR

Original data from scraper before AI verification against source document.

Source verified 6 March 2026
verified correct
Full Legal Summary
Detailed

In October 2019, the Data Protection Authority was informed by the Municipality of Bergen about a data breach in connection with the municipality's tool for communication between school and home called 'Vigilo'. This tool contained a module that allowed school and parents to communicate via a portal or app but that had not been secured properly to ensure the protection of personal data against security threats.

Details

Fine Date

3 September 2020

Authority

Datatilsynet (Norway)

Fine Amount

€276,000

Enforcement Tracker ID

ETid-292

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Bergen Municipality - Norway (2020). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: