Norway

Private individual

950 €

GDPR enforcement action by Norwegian Supervisory Authority (Datatilsynet) on 2026-11-10.

Rank · Sector

#205

of 370 in Individuals and Private Associations

Rank · Norway

#57

of 57

Rank · All fines

#2,937

of 3,280

Case details

Authority: Norwegian Supervisory Authority (Datatilsynet)
Date: 2026-11-10
Controller / Processor: Private individual
Sector: Individuals and Private Associations
Quoted Articles: Art. 6 (1) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Norwegian DPA has imposed a fine of EUR 950 on a private individual. The private individual used a credit information system available to them through their business to run credit checks on a data subject for personal reasons. The information obtained through these checks was then posted in several Facebook groups. It was found that neither the check itself nor the publication of the information was lawful.

Open original source Links to the regulator's original publication or another source.