Sanction RGPD Norwegian Supervisory Authority (Datatilsynet) — Basaren Drift AS : 20 k€ (2021)

Autorité de contrôle
Norwegian Supervisory Authority (Datatilsynet)
Pays
Norvège
Entreprise / secteur
Basaren Drift AS
Montant de l'amende
20 k€
Date de la décision
21 mars 2021
Fondement juridique
Art. 5, Art. 6, Art. 13
Manquement
Base légale insuffisante pour le traitement

Résumé des faits

The Norwegian DPA (Datatilsynet) has imposed a fine of EUR 19,900 on Basaren Drift AS. The controller had installed video cameras in its premises which recorded both its employees and customers. The Norwegian DPA concluded that the controller had no legal basis for the camera surveillance. In addition, the Norwegian DPA found that the controller did not provide sufficient information on the surveillance to the data subjects.

Décision officielle

Norwegian Supervisory Authority (Datatilsynet)

Évaluer votre conformité RGPD avec Data Comply One