Municipality of Indre Østfold
€18,840
Insufficient technical and organisational measures to ensure information security
Decision Date
3 de dezembro de 2020
Authority
Norwegian Supervisory Authority (Datatilsynet)
NO
Sector
Public Sector and Education
Country
NO
Law
GDPRStatus
FINALDescription
The Norwegian DPA (Datatilsynet) imposed a fine in the amount of NOK 200,000 (EUR 18,840) on the municipality of Indre Østfold. Datatilsynet found that a student file containing personal data was published on the municipality's website.
Legal Citations
Art. 6Art. 32 (1)
Issues & Violations
Insufficient technical and organisational measures to ensure information security