# Arbeidstilsynet: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Norwegian Supervisory Authority (Datatilsynet)
- Date: 2022-05-16
- Original: https://www.enforcementtracker.com/ETid-1234
- Canonical: https://overview.legal/posts/47349
- Topics: Education, Public Authority, Controllers, Supervisory Authorities, Personal Data, Public Sector, Processing, Processing Agreement, Supervision, Data Controller

## Summary

The Norwegian DPA (Datatilsynet) has fined the Norwegian Labor Inspectorate 'Arbeidstilsynet' EUR 14,500. The controller had carried out a credit check on the data subject without any valid legal basis for doing so.

## Full text

The Norwegian DPA (Datatilsynet) has fined the Norwegian Labor Inspectorate 'Arbeidstilsynet' EUR 14,500. The controller had carried out a credit check on the data subject without any valid legal basis for doing so.

GDPR Articles: Art. 6 (1) e) GDPR
Industry: Public Sector and Education

---
Generated by overview.legal · https://overview.legal/posts/47349 · 2026-08-22