Court case PVN-2024-06 – Court Ruling (Norway, 2024)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A person asked the Norwegian data protection authority to investigate the Child Welfare Service's handling of their children's data, but the authority decided not to pursue the case. This ruling is important because it clarifies the limits of the authority's investigative powers.
What happened
The Norwegian data protection authority closed an investigation request regarding the Child Welfare Service's data processing.
Who was affected
A person concerned about the data processing related to their children was affected.
What the authority found
The Privacy Appeals Board upheld the decision of the data protection authority, stating that the request did not meet the criteria for a formal complaint under GDPR.
Why this matters
This case highlights the importance of clearly articulating concerns when seeking investigations. Individuals must provide specific details to ensure their complaints are taken seriously.
GDPR Articles Cited
View original scraped data
Original data from scraper before AI verification against source document.
A data subject contacted the Norwegian DPA (Datatilsynet) asking for investigation against the Child Welfare Service in relation to its GDPR compliance. The request covered processing activities relating to data subject’s children. In response, the DPA explained that the [https://www.statsforvalteren.no/ State Administration] (Statsforvalteren) was competent to hear complaints, in particular, regarding data processing of municipality bodies. Thus, the DPA closed the case. Few months later, the data subject filed a complaint with the DPA in relation to data processing performed by the Police. Allegedly, the police breached the duty of confidentiality, disclosing a criminal report case to the Child Welfare Service. Additionally, the data subject asked the DPA to audit the municipality's data processing. The DPA informed the data subject that it is not competent to examine the processing activity's of the police. Also, again the DPA found no reasons to conduct further investigation against the Child Welfare Service, nor to audit the municipality. Hence, the DPA close the case. The data subject lodged an appeal with the Privacy Appeals Board (Personvernnemnda). The Privacy Appeals Board dismissed the appeal. According to the Privacy Appeals Board, the DPA closed the case since there was no complaint within the meaning of Article 77(1) GDPR in conjunction with Article 57 GDPR. The Privacy Appeals Board found that the mere suspicion of unlawful data processing, not yet linked to specific processing activities, did not oblige the DPA to initiate investigation. In the case at hand, the data subject asked the DPA to verify whether the Child Welfare Service violated GDPR in one of the mentioned cases. Nevertheless, the data subject’s claims were vague and general, expressing the data subject dissatisfaction with the Child Welfare Service conduct. Consequently, for the Privacy Appeals Board the data subject's request didn't constitute a complaint under Article 77(1) GDP
Outcome
Court Ruling
A ruling by a national court on a data-protection matter.
Related Cases (0)
No other cases found for Court case PVN-2024-06 in NO
This is the only recorded case for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. Court case PVN-2024-06 - Norway (2024). Retrieved from cookiefines.eu
Last updated: