The Norwegian Data Protection Authority (DPA) issues a fine of €77 139 against St Olav's Hospital. The fine is issued since PDFs, containing personal data, have been stored in a folder without being present in [...]
Ferde AS, a company that handles road tolls in Norway, has been fined € 499 373. The company has illegally transferred large amounts of unstructured data containing personal data to China and is criticized for lacking [...]
Swedish IMY, formerly Datainspektionen, fines the Swedish Police Authority administrative sanction fee of €250 000 for violations of the Criminal Data Act. For the Swedish public sector, the maximum fine is €1M, so this constitutes as [...]
The IT Operations Inquiry (IT-driftsutredningen) recently presented its report on “Secure and cost-effective IT operations” with a special focus on the legal conditions for public sector outsourcing. The conclusion is that an amendment to the [...]
Umeå University receives a fine of €55 000, announces the Swedish DPA Datainspektionen. A group of researchers at the university have scanned public criminal investigation protocols as PDFs and saved them in a US cloud [...]
The Swedish DPA, Datainspektionen, announces that it has completed its review of eight care providers' medical record systems. During their supervision, they have found major shortcomings in the access management and also in functions for [...]
The Swedish DPA, Datainspektionen, issues a fine of SEK 4 million to the Board of Education in the city of Stockholm. The fine applies to the city's school platform, which on examination of the system [...]
Swedish insurance group Folksam reports that they voluntarily, but illegally, have shared personal data concerning more than 1 million data subjects with American companies such as Facebook, Google, Microsoft, Linkedin and Adobe. The illegal data transfers where [...]
Swedish world-renowned retailer H&M reveals a €35M fine in their quarterly report. The fine has been issued by the data protection authority in Hamburg following a personal data incident in the company’s service center. It [...]
The Swedish DPA Datainspektionen has now presented their first embryo of guidelines following the Shrems II case from July 16th. They conclude, as many others, that transfer of personal data from the EU to the [...]
