Municipality of Rælingen – €46,660 Fine (Norway, 2020)

€46,660Datatilsynet (Norway)10 July 2020Norway
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

The Municipality of Rælingen was fined for not properly protecting children's health data on a digital learning platform. They failed to assess risks and secure the data, which could have led to unauthorized access. This case shows the need for careful data protection planning, especially when handling sensitive information.

What happened

The Municipality of Rælingen processed children's health data without conducting a required Data Protection Impact Assessment.

Who was affected

Children using the digital learning platform 'Showbie' whose health data was processed.

What the authority found

Norway's data protection authority fined the municipality for not conducting a Data Protection Impact Assessment and failing to implement adequate security measures.

Why this matters

This case underscores the necessity of assessing data protection risks and implementing strong security measures, particularly when dealing with sensitive data like children's health information.

GDPR Articles Cited

Art. 32 GDPR
Art. 35 GDPR
Full Legal Summary
Detailed

Fine for the processing of children's health data in connection with disability through the digital learning platform 'Showbie'. The Municipality had failed to carry out a Data Protection Impact Assessment ('DPIA') in accordance with Article 35 of the General Data Protection Regulation (Regulation (EU) 2016/679) ('GDPR') prior to the start of the processing and had not taken adequate technical and organisational measures in accordance with Article 32 of the GDPR, resulting in an increased risk of unauthorised access to the personal data of the pupils.

Related Enforcement Actions (0)

No other enforcement actions found for Municipality of Rælingen in NO

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

10 July 2020

Authority

Datatilsynet (Norway)

Fine Amount

€46,660

Enforcement Tracker ID

ETid-333

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Municipality of Rælingen - Norway (2020). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: