According to the assessment of the Data Protection Agency, there were no grounds for the Agency to initiate a case against a municipality based on the establishment of a reference register.

The Data Protection Agency has issued revised guidelines on data protection in employment relationship.

The Data Protection Agency has expressed criticism of a municipality, inter alia, because the municipality had failed to notify a personal data breach to the Agency or communicate the breach to the affected employee.

According to the Data Protection Agency, an insurance company was justified in not providing access to an internal working document as well as the names of the company’s employees to a former customer.