A grocery store went bankrupt. The employees were entitled to document their working hours in order to receive their salaries from the bankruptcy estate. Timegrip, the company that had supplied the time registration system, held the data – but refused to release it. 80 employees sent in data access requests. All were denied.
The Norwegian Data Protection Authority (Datatilsynet) imposed a penalty fee of NOK 250,000 on Timegrip. The reasoning was simple — the right to access one's own personal data applies regardless of whether your employer has gone bankrupt.
What does this mean to you?
When you switch HR systems, payroll, or time tracking systems, ensure that you (not the vendor) have control of the data. Data Processing Agreement The constitution should regulate exactly this.
Inspired by: The Norwegian Data Protection Authority