Norwegian DPA fines company for accessing former employee’s e-mail inbox
The manager of the enterprise had changed the password and logged on to the complainant’s e-mail account every day for a period of six weeks after the employment had ended. The manager also had access to the e-mail account for a period of more than five months.
The e-mail account was allegedly kept open to meet the enterprise’s need to follow up on customers, and to handle enquiries after the complainant had left. Norwegian Data Protection Authority found that the enterprise lacks a legal basis for accessing e-mail in this manner.
