Municipality of Indre Østfold
€18,840
Insufficient technical and organisational measures to ensure information security
Decision Date
December 3, 2020
Authority
Norwegian Supervisory Authority (Datatilsynet)
NO
Sector
Public Sector and Education
Country
NO
Law
GDPRStatus
FINALDescription
The Norwegian DPA (Datatilsynet) imposed a fine in the amount of NOK 200,000 (EUR 18,840) on the municipality of Indre Østfold. Datatilsynet found that a student file containing personal data was published on the municipality's website.
Legal Citations
Art. 6Art. 32 (1)
Issues & Violations
Insufficient technical and organisational measures to ensure information security