The Norwegian Data Protection Authority imposed a NOK 250,000 fine on Grue municipality for privacy breaches, stating they failed to protect personal data adequately.
Grue municipality's breach highlighted a failure to secure confidential information in public records, revealing sensitive data about pupils and their administrative decisions.
The publication of confidential information not only violates GDPR compliance but also threatens the privacy of individuals involved, emphasizing the Authority's seriousness in such breaches.
The case reflects significant nonconformities identified in the municipality's records, leading to the exposure of the personal details of 14 pupils and their families.
Collection
[
|
...
]