Miljø- og Kvalitetsledelse AS – €3,045 Fine (Norway, 2021)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
Miljø- og Kvalitetsledelse AS was fined for sharing CCTV footage of a vandalism incident without proper consent. This is important because it shows that companies must respect privacy when handling personal data, even in cases of wrongdoing. Businesses should be careful about how they share information to avoid legal issues.
What happened
The company disclosed CCTV footage of a vandalism suspect to the suspect's employer without consent.
Who was affected
The individual whose footage was shared and his employer.
What the authority found
The Norwegian data protection authority found that the company lacked a legal basis for sharing the footage with the employer.
Why this matters
This case highlights the need for companies to have clear consent processes in place before sharing personal data. It serves as a reminder that privacy laws apply even when dealing with criminal behavior.
GDPR Articles Cited
View original scraped data
Original data from scraper before AI verification against source document.
The company Miljø- og Kvalitetsledelse operates a car wash facility, where a payment terminal was vandalised. Since the company had CCTV/camera surveillance, they were able to determine who the culprit was and, consequently, reported the incident to the police (and also to the culprit/data subject himself). However, the company went on to disclose the footage to the data subject's employer, as they considered him to be "out of balance" because the data subject had also contacted a lawyer. The data subject was not notified of, nor consented to this disclosure. The DPA held that the company lacked legal basis for the disclosure to the data subjects's employer and was therefore in violation of Articles 5(1)(a) and 6(1) GDPR. The recordings had already been handed over to the police and the further disclosure to the data subject’s employer was unnecessary for the (legitimate) purpose of preventing vandalism or resolving the case.
Related Enforcement Actions (1)
Other enforcement actions involving Miljø- og Kvalitetsledelse AS in NO
Details
Fine Date
17 March 2021
Authority
Datatilsynet (Norway)
Fine Amount
€3,045
35,000 NOK
GDPRhub ID
gdprhub-3503About this data
Cite as: Cookie Fines. Miljø- og Kvalitetsledelse AS - Norway (2021). Retrieved from cookiefines.eu
Last updated: