Norway

Elkjøp AS

1,820,000 €

GDPR enforcement action by Norwegian Supervisory Authority (Datatilsynet) on 2026-06-01.

Rank · Sector

#22

of 597 in Industry and Commerce

Rank · Norway

of 53

Rank · All fines

#127

of 3,050

Case details

Authority: Norwegian Supervisory Authority (Datatilsynet)
Date: 2026-06-01
Controller / Processor: Elkjøp AS
Sector: Industry and Commerce
Quoted Articles: Art. 5 (1) a), (2) GDPR, Art. 6 (1), (4) GDPR, Art. 12 (3) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Norwegian DPA has imposed a fine of EUR 1,820,000 on Elkjøp AS. The controller processed customer data for marketing, profiling, personalisation and analysis purposes via multiple customer platforms. Although the controller based the processing on the data subject's consent, they failed to implement a consent mechanism that ensured consent was given freely, informed and specific. The controller also failed to handle data subjects' requests to exercise their rights adequately.

Open original source Links to the regulator's original publication or another source.