Coop Finnmark SA
€38,600
Insufficient legal basis for data processing
Decision Date
January 14, 2021
Authority
Norwegian Supervisory Authority (Datatilsynet)
NO
Sector
Industry and Commerce
Country
NO
Law
GDPRStatus
FINALDescription
The Norwegian DPA (Datatilsynet) fined Coop Finnmark SA NOK 400,000 (EUR 38,600). The manager of the store in question recorded CCTV footage with a mobile phone and shared the video. The Norwegian DPA states that Coop Finnmark had no legal basis for sharing the CCTV footage. The DPA notes that the case is very serious as the footage showed children, which poses a potentially high risk to their privacy.
Legal Citations
Art. 5 (1)Art. 6
Issues & Violations
Insufficient legal basis for data processing