Unknown

€24,400

Insufficient legal basis for data processing

Beslissingsdatum

2 maart 2021

Autoriteit

Norwegian Supervisory Authority (Datatilsynet)

NO

Sector

Not assigned

Land

CZ

Wet

GDPR

Status

FINAL

Beschrijving

The Norwegian DPA (Datatilsynet) fined a company NOK 250,000 (EUR 24,400). The controller ordered an employee to set up an automatic forwarding of his/her employee email account to a shared company account. The reason given for this was to improve the company's operations. The DPA found that the controller had no legal basis to order such automatic forwarding. It therefore acted unlawfully.

Juridische citaten

Art. 5Art. 6

Problemen en overtredingen

Insufficient legal basis for data processing

Blijf op de hoogte van privacybescherming

We respecteren je privacy. Eén e-mail per maand, geen spam, afmelden kan altijd.