The Norwegian Data Protection Authority has reduced the fine issued to the Norwegian Public Service Pension Fund (SPK) from NOK 2m to NOK 500,000, which SPK has accepted.
SPK received the initial fine because it collected and stored too much income information from the tax administration for some of its members who received a disability pension.
The pension fund discovered the error in 2019 and notified the Norwegian Data Protection Authority about the case.
It stored more information than was needed for around 24,000 members for the years 2016-2018.
In February 2021, the Data Inspectorate imposed a fine of NOK 2m, although an error at the Norwegian Data Protection Authority meant SPK never received the notification or the decision, rendering it invalid.
The Data Inspectorate then sent a new decision in November 2021, whereby the fine was reduced to NOK 1m.
Following a review, SPK concluded that it disagreed with the decision and appealed in January 2022.
The complaint led to the Data Inspectorate changing its decision this month.
The infringement fee has been changed to NOK 500,000.
SPK has accepted the value of the latest fine.









Recent Stories