Kristiansand municipality – €22,000 Fine (Norway, 2025)

€22,000Datatilsynet (Norway)10 June 2025Norway
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Kristiansand municipality was fined €22,000 for using tracking pixels on its helpline website without getting proper consent from users. This is important because it shows that even local governments must follow data protection rules when handling personal information. Website operators should ensure they have clear consent before using tracking tools.

What happened

Kristiansand municipality used tracking pixels on its helpline website without obtaining user consent.

Who was affected

Children and their families using the helpline who had their personal data accessed without consent.

What the authority found

The Norwegian Data Protection Authority found that Kristiansand municipality violated GDPR by not having a valid legal basis for processing personal data.

Why this matters

This case highlights the responsibility of all organizations, including municipalities, to comply with data protection laws. It serves as a reminder for website operators to review their consent practices.

GDPR Articles Cited

AI-verified

Art. 13(GDPR)
Art. 6(1) GDPR
Art. 12(1) GDPR
View original scraped data
Art. 6(1) GDPR
Art. 12(GDPR)
Art. 13(GDPR)

Original data from scraper before AI verification against source document.

Source verified 4 April 2026
amount discrepancy
articles corrected
Full Legal Summary
Detailed

The Norwegian DPA imposed a fine of EUR 22,000 on Kristiansand municipality. The controller offers a helpline for childreen, which had become victims of violence, abuse or neglect. The webiste of the helpline uses tracking pixels resulting in the providers of those pixels gaining acces to personal data of the data subjects without sufficient legal basis.

Violations (2)

Cookies Placed Before Consent
critical

Non-essential cookies (tracking, advertising) are placed on the user's device before obtaining valid consent.

Art. 6(1) GDPR

Third-Party Cookies Without Consent
critical

Third-party tracking cookies or scripts are loaded without obtaining prior user consent.

Art. 13, 14 GDPR

Related Enforcement Actions (0)

No other enforcement actions found for Kristiansand municipality in NO

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

10 June 2025

Authority

Datatilsynet (Norway)

Fine Amount

€22,000

Enforcement Tracker ID

ETid-2658

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Kristiansand municipality - Norway (2025). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: