# Kristiansand municipality: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Norwegian Supervisory Authority (Datatilsynet)
- Date: 2025-06-10
- Original: https://www.enforcementtracker.com/ETid-2658
- Canonical: https://overview.legal/posts/48773
- Topics: Public Authority, Personal Data, IP Address, Education, Public Sector, Controllers, Monitoring, Processing Agreement, Supervisory Authorities, Processing

## Summary

The Norwegian DPA imposed a fine of EUR 22,000 on Kristiansand municipality. The controller offers a helpline for childreen, which had become victims of violence, abuse or neglect. The webiste of the helpline uses tracking pixels resulting in the providers of those pixels gaining acces to personal data of the data subjects without sufficient legal basis.

## Full text

The Norwegian DPA imposed a fine of EUR 22,000 on Kristiansand municipality. The controller offers a helpline for childreen, which had become victims of violence, abuse or neglect. The webiste of the helpline uses tracking pixels resulting in the providers of those pixels gaining acces to personal data of the data subjects without sufficient legal basis.

GDPR Articles: Art. 6 (1) GDPR, Art. 12 GDPR, Art. 13 GDPR
Industry: Public Sector and Education

---
Generated by overview.legal · https://overview.legal/posts/48773 · 2026-08-22