Norway DPA fines university for insufficient access control in MS Teams
The 🇳🇴 University of Agder was fined €12,500 (NOK 150k) for failing to secure personal data on Teams/SharePoint and insufficient internal controls. Short decision, several takeaways for everyone!
Sep 12, 2024
—
4 min read
You might also like
UK ICO fines Capita £14 million for breach after weak security and slow reaction
members
–
8 min read
After first flagging a fine with a potential starting point of £97m, the 🇬🇧 DPA heavily reduced it after several mitigating factors we can all learn from. A decision packed with practical lessons for DPOs, data protection and security teams alike!
UK ICO fines Clearview AI €8.9m and orders stop in processing
members
–
2 min read
And on 8 Oct 2025, the 🇬🇧 Upper Tribunal (appeal court) upheld three of Information Commissioner’s four grounds of appeal, sending the case back to the lower appeal court.
Norway DPA fines the Labour and Welfare Administration (NAV) NOK 20 million
members
–
6 min read
[updated] After the Privacy Appeals Board overturned substantial parts of the DPA's decision against the Labour and Welfare Administration (NAV), including the record NOK 20 million fine, the DPA has decided to reassess the case.