Municipality of Oslo
€39,000
Insufficient legal basis for data processing
תאריך ההחלטה
20 במאי 2021
סמכות
Norwegian Supervisory Authority (Datatilsynet)
NO
סקטור
Public Sector and Education
מדינה
NO
חוק
GDPRסטטוס
FINALתיאור
The Norwegian DPA (Datatilsynet) has imposed a fine of EUR 39,000 on the Municipality of Oslo. On a website of the controller a subpoena from the public prosecutor's office concerning the data subject had been published. The subpoena contained, among other things, personal information such as health data. The incident occurred because the subpoena was not originally classified as confidential and accordingly was not exempted from public disclosure. The document was publicly available for five hours before it was removed.
ציטוטים משפטיים
Art. 5Art. 6
בעיות והפרות
Insufficient legal basis for data processing