Norway

Municipality of Indre Østfold

18,840 €

GDPR enforcement action by Norwegian Supervisory Authority (Datatilsynet) on 2020-12-03.

Rank · Sector

#132

of 357 in Public Sector and Education

Rank · Norway

#39

of 53

Rank · All fines

#1,120

of 3,051

Case details

Authority: Norwegian Supervisory Authority (Datatilsynet)
Date: 2020-12-03
Controller / Processor: Municipality of Indre Østfold
Sector: Public Sector and Education
Quoted Articles: Art. 6 GDPR, Art. 32 (1) b) GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Norwegian DPA (Datatilsynet) imposed a fine in the amount of NOK 200,000 (EUR 18,840) on the municipality of Indre Østfold. Datatilsynet found that a student file containing personal data was published on the municipality's website.

Open original source Links to the regulator's original publication or another source.