The email in question was sent on 20 August 2023 in connection with the local government elections, to the parents of children in kindergartens and schools in the City of Stavanger. The parents’ contact information was reportedly disclosed by the City of Stavanger in accordance with the Freedom of Information Act.
Requested a statement
The complaints to the Data Protection Authority questioned the legality of both the City of Stavanger’s and the majority parties’ processing of personal data. When personal information is obtained under the Freedom of Information Act, further use of the information must be in accordance with the rules set out in the Personal Data Act and the General Data Protection Regulation.
On the basis of the complaints, the Data Protection Authority sent a request for a statement to the Stavanger Labour Party, on behalf of the majority parties. We requested, among other things, an account of the purpose of and legal basis for the processing.
Decision to issue a reprimand
After receiving its response, the Data Protection Authority has now made a decision to issue a reprimand to the Stavanger Labour Party, on behalf of the majority parties, for:
- not sufficiently assessing the relevant legal basis for the processing, and
- not providing information about the processing to the data subjects.
The case has been closed by the Data Protection Authority.