Recent Fines Imposed By The Norwegian Data Protection Authority ("NDPA")

Since the GDPR took effect in May 2018, we have seen over 800 fines issued across the EEA and the U.K. Enforcement started somewhat slow, but between July 2020 and July 2021 there was a significant increase in the size and quantity of fines. Amazon's record fine of EUR 746 million, issued by the Luxembourg data regulator, was revealed in the company's financial records made public on 30 July 2021. We take a look at recent GDPR fines issued by the Norwegian Data Protection Authority (NDPA).

Toll ring company fined NOK 5 million for GDPR non-compliance

The NDPA became aware that the toll ring company Ferde AS was transferring data about passages in toll rings to a data processor in China. On this basis, the NDPA carried out an inspection focusing on whether Ferde AS had adequate routines and measures in place to ensure information security for the data transferred to China.