Kristiansand municipality: Insufficient legal basis for data processing

The Norwegian DPA imposed a fine of EUR 22,000 on Kristiansand municipality. The controller offers a helpline for childreen, which had become victims of violence, abuse or neglect. The webiste of the helpline uses tracking pixels resulting in the providers of those pixels gaining acces to personal data of the data subjects without sufficient legal basis.

GDPR Articles: Art. 6 (1) GDPR, Art. 12 GDPR, Art. 13 GDPR
Industry: Public Sector and Education