Norway: Datatilsynet fines Coop Finnmark NOK 400,000 for GDPR violations
The Norwegian data protection authority ('Datatilsynet') issued, on 11 March 2020, a press release concerning its decision of 28 February 2020 ('the Decision') to impose a fine of NOK 400,000 (approx. €36,800) on Coop Finnmark SA for the distribution of camera surveillance footage. In particular, Datatilsynet outlined that the case involved footage of children under the age of 16 allegedly stealing, which was distributed by the store manager. In addition, the Decision notes that Datatilsynet held that the distribution lacked a basis for processing and that it, therefore, contravenes the basic principle of lawfulness in the General Data Protection Regulation (Regulation (EU) 2016/679) ('GDPR').
Moreover, Datatilsynet highlighted that the fact that the violation concerned the rights of children was a crucial factor in determing the fine, adding that the potential for damage and interference with the privacy of individuals when carrying out video surveillance was also a significant consideration.