Kristiansand municipality
€22,000
Insufficient legal basis for data processing
Decision Date
June 10, 2025
Authority
Norwegian Supervisory Authority (Datatilsynet)
NO
Sector
Public Sector and Education
Country
NO
Law
GDPRStatus
FINALDescription
The Norwegian DPA imposed a fine of EUR 22,000 on Kristiansand municipality. The controller offers a helpline for childreen, which had become victims of violence, abuse or neglect. The webiste of the helpline uses tracking pixels resulting in the providers of those pixels gaining acces to personal data of the data subjects without sufficient legal basis.
Legal Citations
Art. 6 (1)Art. 12Art. 13
Issues & Violations
Insufficient legal basis for data processing