Basaren Drift AS
€19,900
Insufficient legal basis for data processing
Decision Date
March 21, 2021
Authority
Norwegian Supervisory Authority (Datatilsynet)
NO
Sector
Accomodation and Hospitality
Country
NO
Law
GDPRStatus
FINALDescription
The Norwegian DPA (Datatilsynet) has imposed a fine of EUR 19,900 on Basaren Drift AS. The controller had installed video cameras in its premises which recorded both its employees and customers. The Norwegian DPA concluded that the controller had no legal basis for the camera surveillance. In addition, the Norwegian DPA found that the controller did not provide sufficient information on the surveillance to the data subjects.
Legal Citations
Art. 5Art. 6Art. 13
Issues & Violations
Insufficient legal basis for data processing