Grue municipality – €20,800 Fine (Norway, 2024)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
Grue municipality in Norway was fined EUR 20,800 for a data breach that exposed students' personal information on a public portal. This breach happened because the municipality failed to implement proper security measures to protect that data. This case highlights the importance of having strong data protection practices in place.
What happened
Grue municipality unlawfully published personal data of students on a public portal.
Who was affected
Students whose personal information was exposed due to the municipality's actions.
What the authority found
The Norwegian Data Protection Authority found that Grue municipality did not take adequate technical and organizational measures to protect personal data.
Why this matters
This ruling emphasizes that organizations must prioritize data security to prevent breaches. It serves as a reminder for all companies to regularly assess and improve their data protection strategies.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Review needed — 13 March 2026.
Processing notes: articles corrected, amount discrepancy.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Norwegian DPA fined Grue municipality EUR 20,800 following the municipality's notification of a data breach. The municipality reported that personal data of students had been unlawfully published on a public portal. During its investigation, the DPA found that the municipality had not taken sufficient technical and organizational measures to ensure the protection of personal data.
Related Enforcement Actions (0)
No other enforcement actions found for Grue municipality in NO
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
21 October 2024
Authority
Datatilsynet (Norway)
Fine Amount
€20,800
About this data
Cite as: Cookie Fines. Grue municipality - Norway (2024). Retrieved from cookiefines.eu
Last updated: