Enforcement
EN Municipality of Indre Østfold: Insufficient technical and organisational measures to ensure information security
€18,840 fine - Norwegian Supervisory Authority (Datatilsynet)
Content
The Norwegian DPA (Datatilsynet) imposed a fine in the amount of NOK 200,000 (EUR 18,840) on the municipality of Indre Østfold. Datatilsynet found that a student file containing personal data was published on the municipality's website.
GDPR Articles: Art. 6 GDPR, Art. 32 (1) b) GDPR
Industry: Public Sector and Education