Sanction RGPD Norwegian Supervisory Authority (Datatilsynet) — Grue municipality : 21 k€ (2024)
- Autorité de contrôle
- Norwegian Supervisory Authority (Datatilsynet)
- Pays
- Norvège
- Entreprise / secteur
- Grue municipality
- Montant de l'amende
- 21 k€
- Date de la décision
- 21 octobre 2024
- Fondement juridique
- Art. 24, Art. 32 (1) b)
- Manquement
- Mesures techniques et organisationnelles insuffisantes
Résumé des faits
The Norwegian DPA fined Grue municipality EUR 20,800 following the municipality's notification of a data breach. The municipality reported that personal data of students had been unlawfully published on a public portal. During its investigation, the DPA found that the municipality had not taken sufficient technical and organizational measures to ensure the protection of personal data.