# Basaren Drift AS: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Norwegian Supervisory Authority (Datatilsynet)
- Date: 2021-03-21
- Original: https://www.enforcementtracker.com/ETid-643
- Canonical: https://overview.legal/posts/46758
- Topics: Video Surveillance, Controllers, Monitoring, Processing Agreement, Processing, Supervisory Authorities, Personal Data, Data Controller, Healthcare, Law Enforcement

## Summary

The Norwegian DPA (Datatilsynet) has imposed a fine of EUR 19,900 on Basaren Drift AS. The controller had installed video cameras in its premises which recorded both its employees and customers. The Norwegian DPA concluded that the controller had no legal basis for the camera surveillance. In addition, the Norwegian DPA found that the controller did not provide sufficient information on the surveillance to the data subjects.

## Full text

The Norwegian DPA (Datatilsynet) has imposed a fine of EUR 19,900 on Basaren Drift AS. The controller had installed video cameras in its premises which recorded both its employees and customers. The Norwegian DPA concluded that the controller had no legal basis for the camera surveillance. In addition, the Norwegian DPA found that the controller did not provide sufficient information on the surveillance to the data subjects.

GDPR Articles: Art. 5 GDPR, Art. 6 GDPR, Art. 13 GDPR
Industry: Accomodation and Hospitality

---
Generated by overview.legal · https://overview.legal/posts/46758 · 2026-08-22