Norwegian Data Protection Authority Investigating Leak of Personal Data from Bankrupt Airline
The Norwegian Data Protection Authority is currently handling a case involving the leak of personal data belonging to over 400 former employees of the bankrupt airline Flyr. The leak occurred earlier this year when one of the bankruptcy estate’s hired consultants mistakenly shared the information in an email. The leaked data includes sensitive information such as salary, holiday pay, pension, and absence records.
“The status of the case is that it is still being processed. We cannot therefore say anything more about what reactions will come from the Norwegian Data Protection Authority at this time,” said press contact Anders Ballangrud from the Data Protection Authority. The authority is currently obtaining necessary information, conducting investigations, and will eventually make a decision regarding the case.
It is still unknown what the decision will be, but one possible form of reaction from the authority is an infringement fee, which would require Kvale Advokatfirma, the law firm representing the bankruptcy estate, to pay a set amount of money. The authority’s investigations were initiated following a notice of deviation and coverage of the matter by E24, a Norwegian news outlet.
The leak of personal data has raised concerns about the privacy and security of the affected individuals. Associate professor Malgorzata Cyndecka at the University of Bergen highlighted the seriousness of the matter, particularly because the leaked information includes details about absences, which could involve sensitive health-related information.
The case has also involved the Oslo police district, which received a total of 16 reports related to the incident. However, the police have decided to drop the cases and transfer them to an administrative agency, as they have been in dialogue with an employee representative and are awaiting updates from the Norwegian Data Protection Authority.
Stine Snertingdalen, partner and lawyer at Kvale Advokatfirma, who is the administrator of the estate after Flyr’s bankruptcy, stated that a detailed report was submitted to the Norwegian Data Protection Authority shortly after the incident. However, Snertingdalen declined to provide further comments on the matter.
The leak of personal data has had significant consequences for the affected employees, as they lost their jobs when Flyr went bankrupt last winter. Other airlines have since asked former Flyr employees to apply for jobs with them. The Norwegian Data Protection Authority has the option to react by issuing a fine or a reprimand, depending on the circumstances surrounding the leak and the measures taken to prevent similar incidents in the future.
The case serves as a reminder of the importance of safeguarding personal data and the potential consequences of data breaches. The Norwegian Data Protection Authority’s investigation will shed light on the extent of the leak and determine the appropriate actions to be taken to protect individuals’ privacy rights.
What potential actions or penalties can the Data Protection Authority impose on Kvale Advokatfirma, the law firm representing the bankruptcy estate, in response to the breach of personal data
Following a complaint filed by the former employees whose data was leaked.
The leak of personal data occurred when a consultant hired by the bankruptcy estate mistakenly shared the information in an email. This incident has raised concerns about the protection of personal data and has prompted the Norwegian Data Protection Authority to investigate the matter.
The leaked data includes sensitive information such as salary, holiday pay, pension, and absence records, which can have significant implications for the affected individuals. The Data Protection Authority is currently gathering necessary information and conducting thorough investigations to fully understand the extent of the breach and the potential impact on the affected individuals.
The case is still being processed, and the Data Protection Authority has not yet revealed what actions it will take. However, one possible form of reaction could be an infringement fee imposed on Kvale Advokatfirma, the law firm representing the bankruptcy estate. This fee would require the firm to pay a set amount of money as a consequence of the breach.
The Norwegian Data Protection Authority plays a crucial role in safeguarding the privacy and personal data of individuals. Its investigations and subsequent actions will help ensure accountability and promote stronger data protection measures in the future. The outcome of this case will have significant implications for both the bankrupt airline and the consultant responsible for the leak, serving as a reminder of the importance of maintaining the security of personal data in all circumstances.
