Municipality of Indre Østfold – €18,840 Fine (Norway, 2020)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
The Municipality of Indre Østfold in Norway was fined for accidentally posting a student file with personal data on their website. This incident shows how important it is to handle personal data carefully and securely, especially when publishing online.
What happened
A student file containing personal data was mistakenly published on the Municipality of Indre Østfold's website.
Who was affected
The students whose personal data was included in the published file were affected.
What the authority found
The Norwegian DPA determined that the municipality violated GDPR by failing to protect personal data from unauthorized access.
Why this matters
This case highlights the risks of mishandling personal data online and the importance of implementing proper security measures to prevent accidental disclosures. It serves as a reminder for public entities to be vigilant in data protection.
GDPR Articles Cited
The Norwegian DPA (Datatilsynet) imposed a fine in the amount of NOK 200,000 (EUR 18,840) on the municipality of Indre Østfold. Datatilsynet found that a student file containing personal data was published on the municipality's website.
Related Enforcement Actions (0)
No other enforcement actions found for Municipality of Indre Østfold in NO
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
3 December 2020
Authority
Datatilsynet (Norway)
Fine Amount
€18,840
Enforcement Tracker ID
ETid-474
About this data
Cite as: Cookie Fines. Municipality of Indre Østfold - Norway (2020). Retrieved from cookiefines.eu
Last updated: