Sats ASA – €900,000 Fine (Norway, 2023)

€900,000Datatilsynet (Norway)6 February 2023Norway
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Norway's Datatilsynet fined Sats ASA EUR 900,000 for mishandling customer data requests and processing data without a valid reason. This matters because it highlights the importance of responding to customer data requests and having a clear legal basis for data use. Sats failed to comply with multiple GDPR requirements, affecting customer trust.

What happened

Sats ASA did not comply with customer requests for information and data deletion and processed data without a valid legal basis.

Who was affected

Customers of Sats ASA who requested access to or deletion of their personal data.

What the authority found

The Norwegian DPA found that Sats violated GDPR by not fulfilling data access and deletion requests and processing data without a valid reason.

Why this matters

This case emphasizes the need for businesses to respect customer data rights and ensure they have a valid legal basis for processing personal data. Companies should review their data handling practices to avoid similar penalties.

GDPR Articles Cited
Automatically processed
Art. 13(GDPR)
Art. 15(GDPR)
Art. 17(GDPR)
Art. 5(1)(a) GDPR
Art. 6(1) GDPR
Art. 12(1) GDPR
View original scraped data
Art. 5(1)(a) GDPR
e) GDPR
Art. 6(1) GDPR
Art. 12(1) GDPR
(3) GDPR
Art. 13 GDPR
Art. 15 GDPR
Art. 17 GDPR

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Linked-source text retrieved.

Review needed — 5 March 2026.

Processing notes: amount discrepancy.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The Norwegian DPA has imposed a fine of EUR 900,000 on the fitness chain 'Sats'. The DPA had received several complaints from customers who had submitted requests for information as well as deletion of their personal data, which Sats had not complied with. The DPA also found that Sats had processed certain customer data without a valid legal basis.

Related Enforcement Actions (0)

No other enforcement actions found for Sats ASA in NO

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

6 February 2023

Authority

Datatilsynet (Norway)

Fine Amount

€900,000

Enforcement Tracker ID

ETid-1656

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Sats ASA - Norway (2023). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: