The Norwegian SA fines Krokatjønnvegen 15 AS

20 January 2023

Background information

  • Date of final decision: 02 August 2022   
  • National case
  • Controller: Krokatjønnveien 15 AS
  • Legal Reference: Lawfulness of processing (Article 6)
  • Decision: Infringement of the GDPR, Administrative fine and Order to comply
  • Key words: credit ratings, customer relationships, special categories of data


Summary of the Decision


Origin of the case

The background for the fine is a complaint from two private individuals who were subjected to credit ratings without any form of customer relationship or other connection to the company.


Key Findings

After investigation of the case, the Norwegian Supervisory Authority, SA has concluded that the credit ratings were performed without legal basis. The company did not have a legitimate interest in performing credit ratings on the complainants.



The Norwegian SA has fined Krokatjønnvegen 15 AS EUR 30,000 for performing two credit ratings without legal basis. The company has also been instructed to establish written procedures for credit ratings.


For further information:

The news published here does not constitute official EDPB communication, nor an EDPB endorsement. This news item was originally published by the national supervisory authority and was published here at the request of the SA for information purposes. Any questions regarding this news item should be directed to the supervisory authority concerned.