Grue municipality – €20,800 Fine (Norway, 2024)

€20,800Datatilsynet (Norway)21 October 2024Norway
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Grue municipality in Norway was fined EUR 20,800 for a data breach that exposed students' personal information on a public portal. This breach happened because the municipality failed to implement proper security measures to protect that data. This case highlights the importance of having strong data protection practices in place.

What happened

Grue municipality unlawfully published personal data of students on a public portal.

Who was affected

Students whose personal information was exposed due to the municipality's actions.

What the authority found

The Norwegian Data Protection Authority found that Grue municipality did not take adequate technical and organizational measures to protect personal data.

Why this matters

This ruling emphasizes that organizations must prioritize data security to prevent breaches. It serves as a reminder for all companies to regularly assess and improve their data protection strategies.

GDPR Articles Cited

AI-verified

Art. 24(GDPR)
Art. 32(1)(b) GDPR
View original scraped data
Art. 24(GDPR)
Art. 32(1) b) GDPR

Original data from scraper before AI verification against source document.

Source verified 13 March 2026
articles corrected
amount discrepancy
Full Legal Summary
Detailed

The Norwegian DPA fined Grue municipality EUR 20,800 following the municipality's notification of a data breach. The municipality reported that personal data of students had been unlawfully published on a public portal. During its investigation, the DPA found that the municipality had not taken sufficient technical and organizational measures to ensure the protection of personal data.

Related Enforcement Actions (0)

No other enforcement actions found for Grue municipality in NO

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

21 October 2024

Authority

Datatilsynet (Norway)

Fine Amount

€20,800

Enforcement Tracker ID

ETid-2482

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Grue municipality - Norway (2024). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: