Recover AS
€20,000
Insufficient legal basis for data processing
Decision Date
August 25, 2022
Authority
Norwegian Supervisory Authority (Datatilsynet)
NO
Sector
Industry and Commerce
Country
NO
Law
GDPRStatus
FINALDescription
The Norwegian DPA (Datatilsynet) has fined Recover AS EUR 20,000. The controller had carried out a credit check on the data subject without any valid legal basis for doing so.
Legal Citations
Art. 6 (1)
Issues & Violations
Insufficient legal basis for data processing