# NORWAY DPA: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Norwegian Supervisory Authority (Datatilsynet)
- Date: 2021-01-12
- Original: https://www.enforcementtracker.com/ETid-524
- Canonical: https://overview.legal/posts/46639
- Topics: Employees, Processing Agreement, Processing, Supervisory Authorities, Supervision

## Summary

The Norwegian DPA (Datatilsynet) fined a company NOK 400,000 (EUR 38,600) for the illegal automatic forwarding of an employee's email inbox. The automatic forwarding was activated in connection with the employee's sick leave and lasted for more than a month.

## Full text

The Norwegian DPA (Datatilsynet) fined a company NOK 400,000 (EUR 38,600) for the illegal automatic forwarding of an employee's email inbox. The automatic forwarding was activated in connection with the employee's sick leave and lasted for more than a month.

GDPR Articles: Art. 5 GDPR, Art. 6 GDPR
Industry: Employment

---
Generated by overview.legal · https://overview.legal/posts/46639 · 2026-08-22