Forced Consent Costs Elkjop €1.8M

Consent Under Scrutiny

Elkjop, a Norwegian electronics retailer, has been fined €1.8 million by the Norwegian Data Protection Authority in June 2026. The company was found guilty of using forced consent to collect customer data for its loyalty program. This practice was deemed unlawful as it did not meet the requirements for valid consent under the GDPR.

The issue began five years ago when Alexander Hanff, a privacy expert, complained to the Norwegian Data Protection Authority. He argued that Elkjop's practice of forcing customers to consent to data collection for marketing purposes when they signed up for its loyalty program was not compliant with the GDPR. The authority initially sided with Hanff, and after a lengthy process, the fine was imposed.

Was Elkjop's Business Model at Stake?

The GDPR requires that consent be freely given, specific, informed, and unambiguous. Elkjop's practice failed to meet these criteria as customers were not given a genuine choice. They were forced to consent to data collection if they wanted to participate in the loyalty program.

The fine raises questions about the business models of companies that rely heavily on collecting and processing customer data. Elkjop's loyalty program, like many others, is designed to reward repeat customers and encourage loyalty. However, the company's approach to data collection was deemed to be at the expense of customer privacy.

Frequently Asked Questions

The €1.8 million fine is a significant penalty for Elkjop. It serves as a warning to other companies that rely on similar business models. The Norwegian Data Protection Authority's decision demonstrates its commitment to enforcing the GDPR and protecting consumer rights.

What is forced consent? Forced consent occurs when individuals are not given a genuine choice and are coerced into providing consent. Is Elkjop the only company to have been fined for forced consent? No, other companies have also been penalized for similar practices. What can consumers do to protect their rights? Consumers should be aware of how their data is being used and take steps to protect their privacy.