Norwegian Data Protection Authority
Unntatt offentlighet:
Offl. § 13, jf. personopplysningsloven §
24 første ledd 2. punktum
Your reference Our reference Date
Click here to enter text. 20/02345-11 07.12.2023
Rejection of complaint and closure of case – Tesla Norway AS
Datatilsynet refers to your complaint dated 7 May 2020 regarding the exercise of your right of
access against Tesla Norway AS, and Datatilsynet’s last letter to you dated 29 June 2020 with
information about the status of the case.
Background
We informed you on 29 June 2020 that this is a so-called cross-border case. The case is cross
border because Tesla Norway AS is an establishment of Tesla International B.V., which is
established in more than one EEA country and the processing in question takes place in the
context of the activities of such establishments. To ensure uniform application of the GDPR
in the EEA, data protection authorities across the EEA must cooperate in the handling of
cross-border cases.
The Dutch Data Protection Authority has acted as lead supervisory authority in the handling
of your complaint. Datatilsynet, and all other data protection authorities in the EEA, have
been involved as concerned supervisory authorities.
The lead supervisory authority has investigated the matter based on your complaint and
concluded that your complaint should be rejected and that the case be closed. The lead
supervisory authority has investigated the subject matter of your complaint to the extent
appropriate in accordance with Article 57(1)(f) GDPR and, based on such investigation, they
have not found any infringement of the GDPR. All concerned supervisory authorities,
including Datatilsynet, agree with such conclusion.
Please find attached a letter from the lead supervisory authority. The letter explains how your
complaint has been handled and the reason as to why your complaint was rejected.
As your complaint is to be rejected, the supervisory authority that received your complaint –
in this case Datatilsynet – is the one which will adopt the final decision pursuant to Article
60(8) GDPR.
Postal Address: Office address: Phone: Telefax: Ent. reg: Web Address:
P.O. Box 458 Sentrum Trelastgata 3 +47 22 39 69 00 +47 22 42 23 50 974 761 467 datatilsynet.no
0105 OSLO
Decision
We therefore adopt the following decision in this case:
The complaint with reference number 20/02345 is rejected.
Ability to appeal
This decision has been adopted by Datatilsynet in accordance with Article 56 and Chapter VII
of the GDPR, and can therefore not be appealed to the Norwegian Privacy Appeals Board
pursuant to Section 22(2) of the Norwegian Personal Data Act (in Norwegian:
personopplysningsloven). This decision can nevertheless be challenged before Norwegian
courts in accordance with Article 78(1) GDPR.
Duty of Confidentiality
Parties to this matter have a duty of confidentiality under Section 13(b) of the Norwegian
Public Administration Act regarding the information they receive about the complainant’s
identity, personal matters and other identifying information, and such information can only be
used to the extent necessary to safeguard their interests in this case. Any breach of this duty of
confidentiality can be punished pursuant to Section 209 of the Norwegian Penal Code.
In light of the above, we have now closed our case on this matter.
Kind regards
Tobias Judin
Head of Section
Sebastian Forbes
Senior Legal Adviser
This document is electronically approved and therefore does not require a handwritten
signature.
Copy to: Tesla Norway AS
Attachment: Conclusion of the lead supervisory authority
2