Norway

Kristiansand municipality

22,000 €

GDPR enforcement action by Norwegian Supervisory Authority (Datatilsynet) on 2025-06-10.

Rank · Sector

#117

of 356 in Public Sector and Education

Rank · Norway

#30

of 52

Rank · All fines

#1,003

of 3,042

Case details

Authority: Norwegian Supervisory Authority (Datatilsynet)
Date: 2025-06-10
Controller / Processor: Kristiansand municipality
Sector: Public Sector and Education
Quoted Articles: Art. 6 (1) GDPR, Art. 12 GDPR, Art. 13 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Norwegian DPA imposed a fine of EUR 22,000 on Kristiansand municipality. The controller offers a helpline for childreen, which had become victims of violence, abuse or neglect. The webiste of the helpline uses tracking pixels resulting in the providers of those pixels gaining acces to personal data of the data subjects without sufficient legal basis.

Open original source Links to the regulator's original publication or another source.