Employer fined €40,000 over GDPR breach

  • Grievance

Moira Grassick, Chief Operating Officer

(Last updated )

Jump to section:

The Norwegian Data Protection Authority (NDPA) has fined an employer €40,000 for unlawfully setting up automatic forwarding of an employee’s emails. The case will be of interest to Irish employers as it could be a persuasive decision if an employee made a similar claim in this jurisdiction.

The case involved a complaint by an employee who discovered that their employer had activated automatic forwarding of their inbox. The employee had been absent through illness for more than a month. they were unaware Upon their return that the employer had activated the email forwarding during that time.

Guide: Employer GDPR compliance in focus

Lack of legal basis as required under GDPR

This case was investigated by the NDPA. They concluded that the forwarding was in violation of both national regulations concerning an employer’s access to email inboxes and the requirements of the General Data Protection Regulation (GDPR) concerning:

The NDPA ordered the employer to review its written procedures governing access to e-mail inboxes. The employer was also issued a fine of €40,000, a decision they have appealed.

Monitoring staff emails

This Norwegian decision is particularly relevant to Irish employers who have more and more staff working from home.

You may think your business would benefit from monitoring employee emails. If so, you must first ensure that your proposal complies with GDPR principles.

Some questions you need to ask include:

Need our help with your HR issues?

Call our 24/7 helpline for instant advice on any HR issue you’re having. To speak to an expert now, call 0818 923 923.

    Related articles

    • Blog

      Why is impartiality so important in formal proceedings?

      Any formal proceedings in the workplace should be in line with the policy as stated in the Employee Handbook, in order to protect your business and your employees.

      Peninsula
      Peninsula TeamPeninsula Team
      • Employee Conduct
    • Blog

      Employer update: Further restrictions added under Level 5

      On January 6th, the Irish Government agreed that additional public health restrictions will apply under Level 5 of the Plan for Living with COVID. The added restrictions aim to fight and reduce the spread of coronavirus. The advice remains that people should stay at home except for essential reasons. As a result, many employees will continue to work from home. Below, we look at some of the new measures added under Level 5.

      Moira Grassick
      Moira GrassickChief Operating Officer
      • Disciplinary

    Try Brainbox for free today

    When AI meets 40 years of Peninsula expertise you get instant, expert answers to your HR and health & safety questions

    Sign up to our newsletter

    Get the latest news & tips that matter most to your business in our monthly newsletter.