Incident #F713F4 · 20 MAR 2026minor
Freja eID clarifies controller/processor roles for organisation eIDs and names a new data protection officer
The privacy policy now defines data controller and processor, and states that Freja eID Group stays controller for your private Freja eID even when an organisation eID is used, while the organisation controls role-related data. The data protection officer changed from Tony Buss to Mikaela Moen, and the old DPO phone and email line was removed. Other edits are minor rewording of trust-level text.
Won back
- Plain definitions of data controller and data processor
- Clearer statement that Freja eID Group remains controller of data tied to your private eID
- Clearer explanation that different parties may control different parts of your data
Evidence · 4 of 4 quotes matched in source
Freja eID Group remains the data controller for the personal data processed in relation to your private Freja eID.+ inserted · ✓ matched in source
This means that different parties may act as data controllers for different parts of the processing of your personal data.+ inserted · ✓ matched in source
Mikaela Moen as the Data Privacy Officer (“Data Privacy Officer”).+ inserted · ✓ matched in source
Archived version ↗ · 550 words changed