Back to Cases
technologyeducation · 2021
Aalborg Municipality
Datatilsynet found unlawful disclosure of children's and parents' data through school IT systems and criticized the municipality for inadequate risk assessment and security under GDPR Articles 5, 24 and 32.
Fine Imposed€134,000.0
Regulation
Key Takeaways
- School platforms processing minors' data require heightened configuration review and DPIAs.