IDA Forsikring Forsikringsformidling F.M.B.A. – Violation Found (Denmark, 2024)

Violation Found
Datatilsynet (Norway)27 June 2024Denmark
final
Violation Found

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

IDA Forsikring Forsikringsformidling F.M.B.A. recorded customer service calls to improve their services but did not have a clear legal basis for this practice. This matters because it shows that companies must be careful about how they handle personal data, even when trying to enhance their services.

What happened

IDA Forsikring recorded customer service calls without a valid legal basis for processing the audio data.

Who was affected

Customers who interacted with IDA Forsikring's customer service were affected by the call recordings.

What the authority found

The authority found that IDA Forsikring lacked a valid legal basis for processing personal data under GDPR.

Why this matters

This case highlights the importance of having a clear legal basis for processing personal data. Companies should review their data handling practices to ensure compliance with privacy laws.

GDPR Articles Cited
Automatically processed
Art. 9(GDPR)
Art. 6(1)(c) GDPR
Art. 6(1)(f) GDPR
View original scraped data
Art. 6(1)(c) GDPR
Art. 6(1)(f) GDPR
Art. 9(GDPR)

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Secondary-source text retrieved.

Automated check recorded — 13 April 2026.

Processing notes: articles corrected, authority corrected.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

IDA Forsikring Forsikringsformidling F.M.B.A. (a controller) is a Danish insurance company. To improve the controller’s customer services, including their quality, as well, to assess the employees’ performance, the controller was recording incoming telephone calls of customer service. The audio files with recordings were analysed and converted into a text by a data processor. For this purpose, the processor used a speech recognizing software. The software was developed by the processor for past 8 years to optimize the analysis. According to the processor, the conversation recordings were not used in order to train the software. In order to analyse the employees’ conduct during calls with customers, the software picked up the word used by the employees. This was because the controller implemented a dedicated policy (“conversation tree”) to standardize contact with their customers. Hence, once the analysis was done, the call was assigned with a quality score. Consequently, the controller created and developed a list of positive and negative words (a dictionary) based on experience from approximately 30 million calls. However, according to the processor, the conversation recordings were not used in order to train the software. Additionally, the analysis of call let the controller to create a statistics on number of inquiries regarding specific topics. The statistical data allowed the controller to improve the customer service (for example by updated the FAQ section). Moreover, using the statistical data the controller was able to better know the clients behaviour and accordingly adapt their marketing and customer services, for example change the content of the newsletter bearing in mind the actual interest of the customers. The controller claimed they did not use the software to profile employees or customers, since the controller was analysing the conversation, not the individual. Due to the subject of services provided by the controller, the conversation include

Outcome

Violation Found

The DPA found a violation but did not impose a fine.

Related Enforcement Actions (0)

No other enforcement actions found for IDA Forsikring Forsikringsformidling F.M.B.A. in DK

This is the only recorded action for this entity in this jurisdiction.

Details

Decision Date

27 June 2024

Authority

Datatilsynet (Norway)

GDPRhub ID

gdprhub-8249

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. IDA Forsikring Forsikringsformidling F.M.B.A. - Denmark (2024). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: