[TonyStr]

Looking at the report from datatilsynet (Norwegian Data Protection Agency), they cite "multiple reports and tips" as the background. I suspect what happened here is that IMY concluded that this laid outside of their authority, submitted the complaint to datatilsynet and either closed the case and forgot to inform Hanff, or they may have never gotten any response from datatilsynet.

[AlexanderHanff]

I have had several direct discussion with the Norwegian DPA throughout the case, the inspection and investigation were triggered by the IMY cross border case and I have not "sued" the regulator (neither do I say I have) I have filed a complaint against IMY (the Swedish Regulator) for failure to meet their legal obligations under Article 77(2) but then I have already had to file multiple legal complaints against IMY because they are an absolutely terrible supervisory authority that do literally nothing (they send out postcards to Data Controllers for violations saying "Hey do you know what GDPR is?").

So no, I have not sued the Norwegian DPA and actually have a very good relationship with them along with most of the other EU DPAs (I am an advisor to them, I sit in the pool of experts for law and new technologies at the EDPB which includes ALL EU data protection authorities).

[ambicapter]

> an absolutely terrible supervisory authority that do literally nothing

Are they allowed to do anything? Generally these sorts of bodies get their rights from some superior body, and they don't necessarily get carte blanche.