- Enforcing jurisdiction
- Norway · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Norwegian Labor and Welfare Administration – €1,700,000 Fine (Norway, 2023)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
The Norwegian Labor and Welfare Administration was fined EUR 1.7 million for failing to protect personal data. The authority did not secure its IT systems properly, allowing too many employees access to sensitive information. This case highlights the importance of data security measures.
What happened
The administration failed to implement adequate security measures to protect personal data, allowing excessive access by employees.
Who was affected
Individuals whose personal data was inadequately protected by the administration.
What the authority found
The Norwegian DPA ruled that the administration violated multiple GDPR articles regarding data protection and security measures.
Why this matters
This ruling emphasizes the need for organizations to prioritize data security. It serves as a warning that inadequate protection can lead to significant fines and data breaches.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Review needed — 5 March 2026.
Processing notes: amount discrepancy.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Norwegian DPA has imposed a fine of EUR 1.7 million on Arbeids- og velferdsetaten, the Norwegian Labor and Welfare Administration (NAV). During its investigation, the DPA found that the controller had failed to implement appropriate technical and organizational measures to protect personal data. For example, the IT systems were not adequately secured. In addition, an excessive number of employees had access to personal data, including very sensitive data in some cases. At the same time, the controller failed to carry out systematic controls regarding employee use of IT systems. In assessing the fine, the DPA considered the fact that the data had been handled insecurely over a long period of time.
Related Enforcement Actions (0)
No other enforcement actions found for Norwegian Labor and Welfare Administration in NO
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
27 November 2023
Authority
Datatilsynet (Norway)
Fine Amount
€1,700,000
Enforcement Tracker ID
ETid-2136
About this data
Cite as: Cookie Fines. Norwegian Labor and Welfare Administration - Norway (2023). Retrieved from cookiefines.eu
Last updated: