Norway

Coop Finnmark SA

38,600 €

GDPR enforcement action by Norwegian Supervisory Authority (Datatilsynet) on 2021-01-14.

Rank · Sector

#124

of 597 in Industry and Commerce

Rank · Norway

#26

of 53

Rank · All fines

#854

of 3,050

Case details

Authority: Norwegian Supervisory Authority (Datatilsynet)
Date: 2021-01-14
Controller / Processor: Coop Finnmark SA
Sector: Industry and Commerce
Quoted Articles: Art. 5 (1) a) GDPR, Art. 6 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Norwegian DPA (Datatilsynet) fined Coop Finnmark SA NOK 400,000 (EUR 38,600). The manager of the store in question recorded CCTV footage with a mobile phone and shared the video. The Norwegian DPA states that Coop Finnmark had no legal basis for sharing the CCTV footage. The DPA notes that the case is very serious as the footage showed children, which poses a potentially high risk to their privacy.

Open original source Links to the regulator's original publication or another source.