# Gveik AS: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Norwegian Supervisory Authority (Datatilsynet)
- Date: 2021-01-07
- Original: https://www.enforcementtracker.com/ETid-515
- Canonical: https://overview.legal/posts/46630
- Topics: Controllers, Insurance, Processing, Processing Agreement, Supervisory Authorities, Data Controller, Supervision

## Summary

The Norwegian DPA (Datatilsynet) fined Gveik AS EUR 7,250. The controller had carried out a credit check on an individual, although there was no legal basis for doing so.

## Full text

The Norwegian DPA (Datatilsynet) fined Gveik AS EUR 7,250. The controller had carried out a credit check on an individual, although there was no legal basis for doing so.

GDPR Articles: Art. 5 GDPR, Art. 6 GDPR
Industry: Finance, Insurance and Consulting

---
Generated by overview.legal · https://overview.legal/posts/46630 · 2026-08-22