Enforcement
EN Grue municipality: Insufficient technical and organisational measures to ensure information security
€20,800 fine - Norwegian Supervisory Authority (Datatilsynet)
Content
The Norwegian DPA fined Grue municipality EUR 20,800 following the municipality's notification of a data breach. The municipality reported that personal data of students had been unlawfully published on a public portal. During its investigation, the DPA found that the municipality had not taken sufficient technical and organizational measures to ensure the protection of personal data.
GDPR Articles: Art. 24 GDPR, Art. 32 (1) b) GDPR
Industry: Public Sector and Education