NODatatilsynet24 March 2021GDPR
Ålesund kommune
Ålesund kommune fined by Datatilsynet 50,000 NOK for missing risk assessment for Strava.
EUR€4,923
Summary
Ålesund kommune was fined by Datatilsynet for using the Strava app in schools without conducting a risk assessment. As a result, students’ personal data was processed without adequate controls and safeguards.
Grounds for the decision
Use of Strava in schools without a risk assessment and proper safeguards for students’ data.