Oslo Municipal Education Department
€203K($219K USD)final
Date Issued
2019-04-29
Regulation
Authority
Norwegian Supervisory Authority (Datatilsynet)
Country
Norway
Violation Type
Failure to implement sufficient measures to ensure information security
Currency
EUR
Violation Summary
The fine was issued on the following grounds: insufficient security measures established on the app launched by an Oslo school. This app allowed students and parents to contact teachers in real-time. However, unauthorized access was detected, and unknown people gained access to personal data related to students and school employees.
Articles Violated
Art. 32 GDPR