Norwegian DPA: Decision to fine The Norwegian Public Roads Administration

Sep 16, 2020

Source: European Data Protection Board

The Norwegian Data Protection Authority has issued the Norwegian Public Roads Administration a fine of 37,400 EUR (400 000 NOK) for processing personal data for purposes that were incompatible with the originally stated purposes, and for not erasing video recordings after 7 days. 

The background of the fine is the extensive processing of personal data by using fixed road cameras to monitor contract parties, employees, subvendors and the subvendors’ employees. 

The usage of such photos for documenting breaches of contract several months after the incidents took place, is incompatible with the original purpose, which was to make possible immediate security measures. It is therefore not allowed to use these video recordings to follow up contracts. 

When evaluating whether this usage of the video recordings was compatible with the originally stated purpose, the Norwegian Data Protection Authority has emphasized that the new usage is at considerable disadvantage to the contract parties and its employees, and that it is in conflict with how the contract parties can expect the personal data to be used. 

You can read the origional press release on the Norwegian DPA’s website in English here, and in Norwegian here.

For further information, please contact the Norwegian DPA:

The press release published here does not constitute official EDPB communication, nor an EDPB endorsement. This press release was originally published by the national supervisory authority and was published here at the request of the SA for information purposes. As the press release is represented here as it appeared on the SA’s website or other channels of communication, the news item is only available in English or in the Member State’s official language with a short introduction in English. Any questions regarding this press release should be directed to the supervisory authority concerned.

Recent news

EDPB Launches Data Protection Guide for small business

The EDPB has launched a Data Protection Guide to help small business owners on their way to become more data protection compliant. The Guide aims to raise awareness about the GDPR and to provide practical information to SMEs about GDPR compliance in an accessible and...

read more

Europe Day 2023

Every year in early May we celebrate peace and unity in Europe through Europe Day, to commemorate the signing of the 'Schuman Declaration'. This year, on Saturday 6 May, the EU institutions invite you to a wide range of online and on-site activities across the EU...

read more
A look back at the Privacy Symposium 2023

A look back at the Privacy Symposium 2023

For the second time in a row, the EFDPO was one of the Key Partners of the Privacy Symposium in Venice – an international conference for data protection professionals and enthusiasts from around the world. Privacy Symposium aims to bring together data protection...

read more
Generated by Feedzy