Miljø- og Kvalitetsledelse AS – €3,400 Fine (Norway, 2021)

€3,400Datatilsynet (Norway)9 April 2021Norway
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Miljø- og Kvalitetsledelse AS was fined for sharing CCTV footage of a vandalism incident with the perpetrator's employer without consent. This case shows that companies must respect privacy and obtain permission before sharing personal data. Businesses should be cautious about how they handle sensitive information.

What happened

The Datatilsynet fined Miljø- og Kvalitetsledelse AS for disclosing CCTV footage to an employee's employer without consent.

Who was affected

The individual whose actions were captured on CCTV and whose privacy was violated by the company's disclosure.

What the authority found

The authority determined that the company lacked a valid legal basis for sharing the footage, violating GDPR rules.

Why this matters

This case serves as a warning that companies must be careful with personal data and ensure they have consent before sharing it. It reinforces the importance of privacy in the workplace.

GDPR Articles Cited

AI-verified

Art. 5(1)(a) GDPR
Art. 6(1) GDPR
View original scraped data
Art. 5(1) a) GDPR
Art. 6(1) GDPR

Original data from scraper before AI verification against source document.

Source verified 15 March 2026
amount discrepancy
Full Legal Summary
Detailed

The Norwegian DPA (Datatilsynet) has imposed a fine of EUR 3,400 on Miljø- og Kvalitetsledelse AS. At one of the carwashes operated by the controller, incidents of vandalism had occurred at the payment terminal. The controller thereupon sent footage of the incident from a surveillance camera to the employer of the alleged vandal. The Norwegian DPA concluded that the sharing of the video footage had taken place without a legal basis and the controller had thus violated Art. 6 (1) GDPR and Art. 5 (1) a) GDPR. Furthermore, the DPA emphasizes that the disclosure of the recordings was not necessary to clarify the incident, as the recordings had already been provided to the police.

Details

Fine Date

9 April 2021

Authority

Datatilsynet (Norway)

Fine Amount

€3,400

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Miljø- og Kvalitetsledelse AS - Norway (2021). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: