Norway

Miljø- og Kvalitetsledelse AS

3,400 €

GDPR enforcement action by Norwegian Supervisory Authority (Datatilsynet) on 2021-04-09.

Rank · Sector

#344

of 597 in Industry and Commerce

Rank · Norway

#53

of 53

Rank · All fines

#1,978

of 3,050

Case details

Authority: Norwegian Supervisory Authority (Datatilsynet)
Date: 2021-04-09
Controller / Processor: Miljø- og Kvalitetsledelse AS
Sector: Industry and Commerce
Quoted Articles: Art. 5 (1) a) GDPR, Art. 6 (1) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Norwegian DPA (Datatilsynet) has imposed a fine of EUR 3,400 on Miljø- og Kvalitetsledelse AS. At one of the carwashes operated by the controller, incidents of vandalism had occurred at the payment terminal. The controller thereupon sent footage of the incident from a surveillance camera to the employer of the alleged vandal. The Norwegian DPA concluded that the sharing of the video footage had taken place without a legal basis and the controller had thus violated Art. 6 (1) GDPR and Art. 5 (1) a) GDPR. Furthermore, the DPA emphasizes that the disclosure of the recordings was not necessary to clarify the incident, as the recordings had already been provided to the police.

Open original source Links to the regulator's original publication or another source.