Details:

Summary The Norwegian DPA (Datatilsynet) fined Gveik AS EUR 7,250. The controller had carried out a credit check on an individual, although there was no legal basis for doing so.
Link: link
Related articles:  Art. 5 GDPR, Art. 6 GDPR
Type: Insufficient legal basis for data processing
Fine: EUR 7,250
Sector Finance, Insurance and Consulting

 

All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/

Tags: case law