Municipality of Indre Østfold
€18,840
Insufficient technical and organisational measures to ensure information security
Date de décision
3 décembre 2020
Autorité
Norwegian Supervisory Authority (Datatilsynet)
NO
Secteur
Public Sector and Education
Pays
NO
Droit
GDPRStatut
FINALDescription
The Norwegian DPA (Datatilsynet) imposed a fine in the amount of NOK 200,000 (EUR 18,840) on the municipality of Indre Østfold. Datatilsynet found that a student file containing personal data was published on the municipality's website.
Citations légales
Art. 6Art. 32 (1)
Questions et violations
Insufficient technical and organisational measures to ensure information security