Municipality of Oslo

€39,000

Insufficient legal basis for data processing

決定日期

2021年5月20日

權限

Norwegian Supervisory Authority (Datatilsynet)

NO

部門

Public Sector and Education

國家

NO

法律

GDPR

狀態

FINAL

說明

The Norwegian DPA (Datatilsynet) has imposed a fine of EUR 39,000 on the Municipality of Oslo. On a website of the controller a subpoena from the public prosecutor's office concerning the data subject had been published. The subpoena contained, among other things, personal information such as health data. The incident occurred because the subpoena was not originally classified as confidential and accordingly was not exempted from public disclosure. The document was publicly available for five hours before it was removed.

法律引文

Art. 5Art. 6

問題與違規

Insufficient legal basis for data processing

保持最新的隱私權執法資訊

我們尊重您的隱私。每月一封電子郵件,無垃圾郵件,可隨時取消訂閱。