-
The Norwegian Data Protection Authority has issued a reprimand to Disqus. The decision comes as a result of the company’s previous disclosure of personal data about data subjects in Norway without a legal basis.
-
We have adopted a decision to impose an administrative fine of NOK 250,000 on Grue municipality for breach of GDPR requirements. The decision comes after the Norwegian Data Protection Authority was notified of a breach of confidentiality in the municipality’s public records.
-
The Data Protection Authority has made a decision to impose an infringement penalty of NOK 150,000 on the University of Agder (UiA) for violation of the General Data Protection Regulation. The University had not taken appropriate measures to safeguard personal data security in its use of Microsoft Teams.
-
In 2023, the Data Protection Authority received complaints from several private individuals who had received emails containing political advertising from the majority parties in Stavanger (Labour, Green, Red, Centre, Socialist Left and Progress). We have now made a final decision to reprimand the Stavanger Labour Party – on behalf of the majority parties.
-
The Data Protection Authority decided before the summer to impose an infringement penalty of NOK 250,000 to Eidskog Municipality for breach of the requirements for a legal basis in the General Data Protection Regulation.
-
In march, The Data Protection Authority decided to impose an infringement penalty of NOK 20 million and issue several orders to the Norwegian Labour and Welfare Administration (NAV). The decision came after an inspection where we checked NAV’s safeguarding of confidentiality through access management and log control. We found several serious non-conformities.
-
On 30–31 May 2024, the The Nordic Data Protection Authorities (DPAs) met in Oslo for their annual Nordic Meeting. The purpose of the meeting is to discuss current data protection issues and exchange best practices. During the meeting the DPAs signed a common declaration addressing current data protection issues.
-
Several large online services have begun to demand payment if you do not consent to your data being used for behavioural advertising. The data protection authorities of Norway, the Netherlands and Hamburg have asked the European Data Protection Board (EDPB) to issue an opinion on the matter.
-
Large language models have taken society by storm in the past year. It is also reflected when the Norwegian Data Protection Authority has now selected four new projects for exploration in the regulatory sandbox.