Background information
- Date of final decision: 02 August 2022
- National case
- Controller: Krokatjønnveien 15 AS
- Legal Reference: Lawfulness of processing (Article 6)
- Decision: Infringement of the GDPR, Administrative fine and Order to comply
- Key words: credit ratings, customer relationships, special categories of data
Summary of the Decision
Origin of the case
The background for the fine is a complaint from two private individuals who were subjected to credit ratings without any form of customer relationship or other connection to the company.
Key Findings
After investigation of the case, the Norwegian Supervisory Authority, SA has concluded that the credit ratings were performed without legal basis. The company did not have a legitimate interest in performing credit ratings on the complainants.
Decision
The Norwegian SA has fined Krokatjønnvegen 15 AS EUR 30,000 for performing two credit ratings without legal basis. The company has also been instructed to establish written procedures for credit ratings.
For further information:
The news published here does not constitute official EDPB communication, nor an EDPB endorsement. This news item was originally published by the national supervisory authority and was published here at the request of the SA for information purposes. Any questions regarding this news item should be directed to the supervisory authority concerned.