- Enforcing jurisdiction
- Norway · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Ålesund Municipality – €4,900 Fine (Norway, 2021)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Ålesund Municipality was fined for not following proper privacy procedures when using an app in schools. The Norwegian DPA found that the municipality failed to protect students' data during physical education classes. This case highlights the need for schools to implement privacy measures when using technology.
What happened
Teachers at Ålesund Municipality used an app that led to data breaches due to lack of privacy procedures.
Who was affected
Students who were tracked using the Strava app during physical education classes.
What the authority found
The Norwegian DPA ruled that the municipality violated data protection rules by not conducting a necessary privacy impact assessment.
Why this matters
This ruling emphasizes the need for educational institutions to prioritize data protection when using technology in classrooms. Schools should establish clear privacy protocols to safeguard student data.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Review needed — 15 March 2026.
Processing notes: amount discrepancy.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Norwegian DPA (Datatilsynet) imposed a fine of EUR 4,900 on the municipality of Ålesund. At two schools in Ålesund, teachers asked students to download the training app Strava for physical education classes. The students were then given tasks that the teachers controlled via the tracking function. According to the Norwegian DPA's investigation, this resulted in data breaches because the municipality failed to provide standard procedures for privacy-compliant app use in schools. For example, a data protection impact assessment was not carried out, although this would have been necessary in view of the potential risk to the students. In addition, adequate technical and organizational security measures had not been implemented to ensure the protection of the processing.
Related Enforcement Actions (0)
No other enforcement actions found for Ålesund Municipality in NO
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
15 March 2021
Authority
Datatilsynet (Norway)
Fine Amount
€4,900
About this data
Cite as: Cookie Fines. Ålesund Municipality - Norway (2021). Retrieved from cookiefines.eu
Last updated: