Norway

Argon Medical Devices

220,000 €

GDPR enforcement action by Norwegian Supervisory Authority (Datatilsynet) on 2023-03-08.

Rank · Sector

#12

of 213 in Employment

Rank · Norway

of 52

Rank · All fines

#330

of 3,042

Case details

Authority: Norwegian Supervisory Authority (Datatilsynet)
Date: 2023-03-08
Controller / Processor: Argon Medical Devices
Sector: Employment
Quoted Articles: Art. 33 (1) GDPR
Type of violation: Insufficient fulfilment of data breach notification obligations

Summary

The Norwegian DPA has fined Argon Medical Devices EUR 220,000. The controller failed to notify the DPA of a data breach that involved personal data of all its European employees within 72 hours.
---UPDATE---
The controller appealed against the decision to the DPA, but the appeal was dismissed.

Open original source Links to the regulator's original publication or another source.