Norwegian university fined for GDPR violations when using Microsoft Teams

Around 16,000 registered users connected to the university were affected, included Ukrainian refugees.

The University of Agder in Kristiansand in Norway has been fined NKr 150,000 ($13,870) for breaching requirements for security and internal control when processing personal data while using Microsoft Teams.

In February 2024, an employee at the university discovered documents with personal data in open Teams folders – open for all employees

Datatilsynet, the

Free Trial

Register for free to keep reading.

To continue reading this article and unlock full access to GRIP, register now. You’ll enjoy free access to all content until our subscription service launches in early 2026.

  • Unlimited access to industry insights
  • Stay on top of key rules and regulatory changes with our Rules Navigator
  • Ad-free experience with no distractions
  • Weekly podcasts from trusted external experts
  • Fresh compliance and regulatory content every day
Register for free Already a member? Sign in