DPA audit - DPO Hub

Norway DPA orders Helseplattformen to rectify shortcomings

members – 3 min read

🇳🇴 Datatilsynet notifies Helseplattformen of their intent to order fixes to serious organisational and (less serious) technical deficiencies – response is due by 6 Jan 2026, with the final decision after. Key ISMS takeaways on this one + download a collated PDF.

Dec 7, 2025

Norway DPA fines the Labour and Welfare Administration (NAV) NOK 20 million

members – 6 min read

[updated] After the Privacy Appeals Board overturned substantial parts of the DPA's decision against the Labour and Welfare Administration (NAV), including the record NOK 20 million fine, the DPA has decided to reassess the case.

Oct 1, 2025

Norway DPA shares education sector audit findings

members – 2 min read

Datatilsynet completed their large-scale audit examining how 50 municipalities safeguard privacy and data protection when using digital learning tools for educational purposes. Read their request for information letter here + watch the recording of their final report presentation.

May 15, 2025

Sweden MedHelp 1177 case

members – 8 min read

This case is not only a goldmine for DPOs in the Swedish healthcare sector (although particularly so), but DPOs in general, for assessing roles, legal bases and processor liability.

Feb 22, 2024

UK ICO Gameforge audit report

members – 3 min read

The ICO conducted a 'consentual audit' of Gameforge’s processing of 🇬🇧 children’s personal data under the AADC and data protection legislation.

Feb 15, 2024

Norway DPA warns site tracking investigations 🧐

members – 2 min read

⏰ Datatilsynet will soon start investigating non-compliant tracking technologies. If you use Meta Pixel or similar, it's time for website due diligence!

Dec 21, 2023