Details:

Summary The Norwegian DPA (Datatilsynet) fined Elektro & Automasjon Systemer AS EUR 20,000. The controller had carried out a credit check on an individual, although there was no legal basis for doing so.
Link: link
Related articles:  Art. 6 (1) f) GDPR
Type: Insufficient legal basis for data processing
Fine: EUR 20,000
Sector Industry and Commerce

 

All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/

Tags: case law