Sanction RGPD Norwegian Supervisory Authority (Datatilsynet) — University of Agder : 13 k€ (2024)
- Autorité de contrôle
- Norwegian Supervisory Authority (Datatilsynet)
- Pays
- Norvège
- Entreprise / secteur
- University of Agder
- Montant de l'amende
- 13 k€
- Date de la décision
- 4 septembre 2024
- Fondement juridique
- Art. 32, Art. 24
- Manquement
- Mesures techniques et organisationnelles insuffisantes
Résumé des faits
The Norwegian DPA has fined the University of Agder (UiA) EUR 12,700. An employee of UiA had discovered that documents containing personal data of employees, students and external individuals were stored in open Microsoft Teams foldersand that employees with no business need were able to access them. During its investigation, the DPA found that UiA had failed to implement appropriate technical and organisational measures to protect personal data.