Norway

Timegrip AS

21,650 €

GDPR enforcement action by Norwegian Supervisory Authority (Datatilsynet) on 2026-01-16.

Rank · Sector

#55

of 213 in Employment

Rank · Norway

#32

of 53

Rank · All fines

#1,012

of 3,050

Case details

Authority: Norwegian Supervisory Authority (Datatilsynet)
Date: 2026-01-16
Controller / Processor: Timegrip AS
Sector: Employment
Quoted Articles: Art. 15 (1), (3) GDPR
Type of violation: Insufficient fulfilment of data subjects rights

Summary

The Norwegian DPA has imposed a fine of EUR 21,650 on Timegrip AS. The controller had been tracking the working hours of employees at a company that went bankrupt. A former employee requested that the controller send the working hours to the data subject so that they could claim their unpaid wages from the bankruptcy estate. Furthermore, the bankruptcy estate itself requested the data, but the controller refused to send it to them.

Open original source Links to the regulator's original publication or another source.