- Enforcing jurisdiction
- Norway · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Miljø- og Kvalitetsledelse AS – €3,400 Fine (Norway, 2021)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Miljø- og Kvalitetsledelse AS was fined for sharing surveillance footage of a vandalism incident without proper justification. The Norwegian DPA found that sharing the footage with the alleged vandal's employer was not necessary. This ruling reminds businesses to be careful about sharing personal data.
What happened
The company shared video footage of an incident with the employer of the alleged vandal.
Who was affected
The alleged vandal and their employer were affected by the sharing of the footage.
What the authority found
The Norwegian DPA ruled that the company violated GDPR by disclosing personal data without a legal basis.
Why this matters
This case underscores the need for companies to have a valid reason before sharing personal information. Businesses should train staff on data protection principles.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Review needed — 15 March 2026.
Processing notes: amount discrepancy.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Norwegian DPA (Datatilsynet) has imposed a fine of EUR 3,400 on Miljø- og Kvalitetsledelse AS. At one of the carwashes operated by the controller, incidents of vandalism had occurred at the payment terminal. The controller thereupon sent footage of the incident from a surveillance camera to the employer of the alleged vandal. The Norwegian DPA concluded that the sharing of the video footage had taken place without a legal basis and the controller had thus violated Art. 6 (1) GDPR and Art. 5 (1) a) GDPR. Furthermore, the DPA emphasizes that the disclosure of the recordings was not necessary to clarify the incident, as the recordings had already been provided to the police.
Related Enforcement Actions (1)
Other enforcement actions involving Miljø- og Kvalitetsledelse AS in NO
Details
Fine Date
9 April 2021
Authority
Datatilsynet (Norway)
Fine Amount
€3,400
About this data
Cite as: Cookie Fines. Miljø- og Kvalitetsledelse AS - Norway (2021). Retrieved from cookiefines.eu
Last updated: