Asker Municipality – €100,000 Fine (Norway, 2021)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
Norway's Asker Municipality was fined EUR 100,000 for accidentally publishing personal data on its website. This included names and birthdates of 127 people, even children. The DPA found the breach happened because the municipality didn't have proper routines for handling email lists.
What happened
Asker Municipality published personal data, including names and birthdates, on its website by mistake.
Who was affected
127 individuals, including children, whose names and birthdates were exposed online.
What the authority found
The Norwegian DPA fined the municipality for failing to have proper procedures to prevent the accidental publication of personal data.
Why this matters
This case highlights the need for strict data handling procedures to prevent accidental data exposure. Public entities must ensure robust checks to protect personal information.
GDPR Articles Cited
The Norwegian DPA (Datatilsynet) has fined the municipality of Asker EUR 100,000. On May 20, 2020, the DPA received a notice that the municipality had unlawfully published personal data on its website. On the website, users could view the names of documents that had previously been sent via the municipality's email distribution list. In addition to the names of the actual document, they also contained the names and dates of birth of 127 people, including children. Although the distribution lists were proofread daily by two people, the municipality had failed to detect the discrepancies. The Norwegian DPA concludes that the data breach occurred partly due to a lack of required routines for handling email lists.
Related Enforcement Actions (0)
No other enforcement actions found for Asker Municipality in NO
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
15 March 2021
Authority
Datatilsynet (Norway)
Fine Amount
€100,000
Enforcement Tracker ID
ETid-627
About this data
Cite as: Cookie Fines. Asker Municipality - Norway (2021). Retrieved from cookiefines.eu
Last updated: