# Disqus Inc.: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Norwegian Supervisory Authority (Datatilsynet)
- Date: 2021-05-05
- Original: https://www.enforcementtracker.com/ETid-667
- Canonical: https://overview.legal/posts/46782
- Topics: Telecommunications, Processing Agreement, Processing, Supervisory Authorities, Supervision

## Summary

On May 5, 2021, the Norwegian DPA (Datatilsynet) announced that it intents to fine Disqus Inc. EUR 2, 500, 000 for violations of Art. 5 (1), (2) GDPR, Art. 6 GDPR, Art. 12 GDPR and Art. 13 GDPR. It is alleged that Disqus unlawfully tracked visitors of Norwegian websites which used the Disqus plugin. Their data was then passed on to third-party advertisers.

## Full text

On May 5, 2021, the Norwegian DPA (Datatilsynet) announced that it intents to fine Disqus Inc. EUR 2, 500, 000 for violations of Art. 5 (1), (2) GDPR, Art. 6 GDPR, Art. 12 GDPR and Art. 13 GDPR. It is alleged that Disqus unlawfully tracked visitors of Norwegian websites which used the Disqus plugin. Their data was then passed on to third-party advertisers.

GDPR Articles: Art. 5 (1), (2) GDPR, Art. 6 GDPR, Art. 12 GDPR, Art. 13 GDPR
Industry: Media, Telecoms and Broadcasting

---
Generated by overview.legal · https://overview.legal/posts/46782 · 2026-08-22