Argon Medical Devices
€220,000
Insufficient fulfilment of data breach notification obligations
Decision Date
March 8, 2023
Authority
Norwegian Supervisory Authority (Datatilsynet)
NO
Sector
Employment
Country
NO
Law
GDPRStatus
FINALDescription
The Norwegian DPA has fined Argon Medical Devices EUR 220,000. The controller failed to notify the DPA of a data breach that involved personal data of all its European employees within 72 hours.
Legal Citations
Art. 33 (1)
Issues & Violations
Insufficient fulfilment of data breach notification obligations