Oslo Municipal Education Department – €120,000 Fine (Norway, 2019)

€120,000Datatilsynet (Norway)29 April 2019Norway
reduced
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

The Oslo Municipal Education Department was fined EUR 120,000 for security flaws in a school messaging app. These flaws allowed unauthorized access to personal data of students, parents, and staff. This case underlines the need for strong security measures in apps handling sensitive information.

What happened

Security vulnerabilities in a school messaging app allowed unauthorized access to personal data.

Who was affected

Students, parents, and school staff using the app were affected by the security breach.

What the authority found

The Norwegian data protection authority fined the department for inadequate security measures in the app.

Why this matters

This case stresses the importance of implementing robust security measures in digital tools, especially those used in educational settings. It serves as a warning to organizations to regularly review and strengthen their security protocols.

GDPR Articles Cited

AI-verified

Art. 32 GDPR
View original scraped data
Art. 32 GDPR

Original data from scraper before AI verification against source document.

Source verified 6 March 2026
amount discrepancy
Full Legal Summary
Detailed

Fine for security vulnerabilities in a mobile messaging app developed for use in an Oslo school. The app allows parents and students to send messages to school staff. Due to insufficient technical and organizational measures to protect information security, unauthorized persons were able to log in as authorized users and gain access to personal data about students, legal representatives and employees. The fine has meanwhile been reduced to EUR 120.000, see link

Related Enforcement Actions (0)

No other enforcement actions found for Oslo Municipal Education Department in NO

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

29 April 2019

Authority

Datatilsynet (Norway)

Fine Amount

€120,000

Enforcement Tracker ID

ETid-75

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Oslo Municipal Education Department - Norway (2019). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: