Norway

Disqus Inc.

—

GDPR enforcement action by Norwegian Supervisory Authority (Datatilsynet) on 2021-05-05.

Case details

Authority: Norwegian Supervisory Authority (Datatilsynet)
Date: 2021-05-05
Controller / Processor: Disqus Inc.
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 5 (1), (2) GDPR, Art. 6 GDPR, Art. 12 GDPR, Art. 13 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

On May 5, 2021, the Norwegian DPA (Datatilsynet) announced that it intents to fine Disqus Inc. EUR 2, 500, 000 for violations of Art. 5 (1), (2) GDPR, Art. 6 GDPR, Art. 12 GDPR and Art. 13 GDPR. It is alleged that Disqus unlawfully tracked visitors of Norwegian websites which used the Disqus plugin. Their data was then passed on to third-party advertisers.

Open original source Links to the regulator's original publication or another source.