GDPR Fines

A public record of GDPR enforcement across Europe — compiled by INPLP members

Oslo Municipality

Country
Norway
Fine
51,000 EUR
Date
2019-10-11
Sector
Public services
Articles
Art. 32 GDPR

Monetary fine

From 2007 to November 2018, 19 nursing homes operated by the Municipality of Oslo stored patient data outside the patient journal system in the form of work lists describing the medical needs of the residents (i.e. patient data). The violation of the Data Protection Act was reported to the Municipality of Oslo by the data controller. The fine was calculated according to the practice of the former Norwegian Personal Data Act. Authority: Norwegian Data Protection Authority (Datatilsynet)