Privacy Blog
NORWEGIAN DPA FINES BERGEN MUNICIPALITY
14.10.2020
Norwegian Data Protection Authority (“DPA”) fined the Bergen Municipality EUR 276,000 for insufficient security of personal data in the communication system between school and home.
Bergen Municipality regarding the municipality's new tool for communication between school and home. Tool contains a module where school and parents can communicate via a portal or app. The municipality had not established nor communicated the necessary guidelines to secure the personal information of children and parents with a confidential address before the tool was put to use.
This spring, the municipality was notified of the DPS’s intention to impose an administrative fine, and now the fine has been made final and Bergen Municipality has now received the final decision of an administrative fine of EUR 276,000.
The decision emphasized that the municipality had not established nor communicated the necessary guidelines for information about children who have a clear interest in the information about them being processed with the highest degree of confidentiality.
You can reach the full text of the Decision here.
Should you have any queries and/or remarks, please do not hesitate to contact us.
Kind regards,
Zumbul Attorneys-at-Law