Municipality of Indre Østfold
€18,840
Insufficient technical and organisational measures to ensure information security
Fecha de la decisión
3 de diciembre de 2020
Autoridad
Norwegian Supervisory Authority (Datatilsynet)
NO
Sector
Public Sector and Education
País
NO
Ley
GDPREstado
FINALDescripción
The Norwegian DPA (Datatilsynet) imposed a fine in the amount of NOK 200,000 (EUR 18,840) on the municipality of Indre Østfold. Datatilsynet found that a student file containing personal data was published on the municipality's website.
Citas legales
Art. 6Art. 32 (1)
Problemas e infracciones
Insufficient technical and organisational measures to ensure information security