Norway DPA with record NOK 4 million DPO fine to Telenor
After initially flagging a potential NOK 99m (~€8.3m) fine, Datatilsynet fined Telenor ASA NOK 4m (~€351,000) for failing to properly assess and document the DPO role – particularly around independence, potential conflicts of interest and a direct reporting line to top management.
Mar 26, 2025
—
8 min read
You might also like
🇮🇪 DPC fines TikTok €530m for China transfers
members
–
2 min read
[Added DPC comments] TikTok also ordered to bring processing into compliance within six months or stop the transfers. They also breached transparency by failing to disclose the third countries involved and didn't explain the nature of the transfers in its privacy policy.
🇮🇪 DPC fines LinkedIn €310m for illegal behavioural analysis and targeted advertising ('BA & TA')
members
–
7 min read
Key takaways: Lack of lawful basis = loss of control = 'significant damage', lawful bases are notoriously tricky to get right, and most have lots to gain in improving information and transparency. Full decision = a key lesson on legitimate interest and LIAs.
🇮🇪 DPC fines Meta €91m for failing to safeguard passwords and notify breaches
members
–
1 min read
UPDATE 1 Jan: Summary + full decision published! The DPC fines Meta for failing to safeguard users' passwords (storing them in plaintext!) and for notifying the breach too late.