# Timegrip AS: Insufficient fulfilment of data subjects rights

- Type: Enforcement
- Source: Norwegian Supervisory Authority (Datatilsynet)
- Date: 2026-01-16
- Original: https://www.enforcementtracker.com/ETid-3000
- Canonical: https://overview.legal/posts/52354
- Topics: Personal Data, IP Address, Controllers, Employees, Monitoring, Supervisory Authorities, Processing Agreement, Data Controller, Cookies, Supervision

## Summary

The Norwegian DPA has imposed a fine of EUR 21,650 on Timegrip AS. The controller had been tracking the working hours of employees at a company that went bankrupt. A former employee requested that the controller send the working hours to the data subject so that they could claim their unpaid wages from the bankruptcy estate. Furthermore, the bankruptcy estate itself requested the data, but the controller refused to send it to them.

## Full text

The Norwegian DPA has imposed a fine of EUR 21,650 on Timegrip AS. The controller had been tracking the working hours of employees at a company that went bankrupt. A former employee requested that the controller send the working hours to the data subject so that they could claim their unpaid wages from the bankruptcy estate. Furthermore, the bankruptcy estate itself requested the data, but the controller refused to send it to them.

GDPR Articles: Art. 15 (1), (3) GDPR
Industry: Employment

---
Generated by overview.legal · https://overview.legal/posts/52354 · 2026-08-22