The Norwegian Data Protection Authority Datatilsynet issued a fine of NOK 20,000,000 against Elkjøp Nordic AS and Elkjøp Norge AS on 1 June 2026, following an on-site inspection in June 2022. Four violations were identified: the consent model for the loyalty club was not specific, voluntary, or sufficiently informed; customer data was further processed via a customer match tool without a valid legal basis or compatibility assessment; the use of offline conversion tools was insufficiently assessed and documented, and data subject rectification requests were not handled within the required timeframes. The fine was calculated based on the global turnover of parent company Currys but set well below the standard starting range, taking into account the lengthy proceedings and post-inspection compliance improvements.