Ålesund Municipality – €4,900 Fine (Norway, 2021)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
Ålesund Municipality in Norway was fined for using a fitness app in schools without proper privacy measures. Teachers asked students to use the app, but the municipality didn't ensure the app was used safely. This case shows the need for schools to protect student data when using digital tools.
What happened
Ålesund Municipality used a fitness app in schools without adequate privacy safeguards.
Who was affected
Students at two schools in Ålesund who were required to use the app for physical education classes.
What the authority found
The Norwegian DPA fined the municipality EUR 4,900 for failing to implement necessary privacy and security measures.
Why this matters
This ruling stresses the importance of conducting risk assessments and implementing security measures when using apps in educational settings. It serves as a reminder for schools to prioritize student privacy in digital learning environments.
GDPR Articles Cited
The Norwegian DPA (Datatilsynet) imposed a fine of EUR 4,900 on the municipality of Ålesund. At two schools in Ålesund, teachers asked students to download the training app Strava for physical education classes. The students were then given tasks that the teachers controlled via the tracking function. According to the Norwegian DPA's investigation, this resulted in data breaches because the municipality failed to provide standard procedures for privacy-compliant app use in schools. For example, a data protection impact assessment was not carried out, although this would have been necessary in view of the potential risk to the students. In addition, adequate technical and organizational security measures had not been implemented to ensure the protection of the processing.
Related Enforcement Actions (0)
No other enforcement actions found for Ålesund Municipality in NO
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
15 March 2021
Authority
Datatilsynet (Norway)
Fine Amount
€4,900
Enforcement Tracker ID
ETid-608
About this data
Cite as: Cookie Fines. Ålesund Municipality - Norway (2021). Retrieved from cookiefines.eu
Last updated: