Skip to main content

SHIELD

Linkedin Youtube
DONATE

FARO Directory

FARO stands for Frontline Record of Online Harms. Technology-related harm usually reaches the public one case at a time: a school in one country, a family in another, each easy to treat as an exception. This directory puts those cases side by side to help grassroots actors see where others face the same issues they do, and to help governments and regulators see the bigger picture of the harms occurring. The directory describes what its records contain. It does not measure how often these harms occur, and a country with few records may simply have little published about it.

How to use this directory: Topics are filterable for FARO reports that have already been created based on these incidents. The harms and response patterns shown are those featured there. To see the incidents used in a country-specific report, choose that country under Country report. Pick a pattern or evidence type to see on the map which countries have matching records. Click a country on the map or in the list to see its records below. Use the filter to search for keywords or specific sources.

Shaded countries have at least one record. Choose a pattern to see where it appears.

At least one matching recordNo matching recordSelected country

Shading shows only that a country has at least one record in this directory that matches your selection, and every shaded country looks the same on purpose. It says nothing about how often these harms occur there. Pattern filters only cover records classified so far, and small countries are easy to miss on a map, so use the list as well.

Countries

In the list but not drawn on the map: Multiple countries, Not stated.

Country: Norway Clear all

8 results

Cards List
Technology in Education
NorwayBlog/personal post

Norway – elementary school students able to access pornography on school-issued tablets

A parent reported that children began showing pornography to each other in the classroom after physical books were replaced with iPads connected to the open internet. The school responded by offering trauma counseling. The reported consequence was exposure of students to pornographic material and resulting distress. This is a personal interview. Source available to SHIELD.

Source: Angeline Corvaglia
Date source link verified: 16/10/2026
View source
Technology in Education
NorwayNews article

Norway – Pornographic and violent content on minor boy’s school-issued tablet

A parent reported that pornographic and violent video content appeared on their first grade boy's school-issued tablet, finding that the tablet had no restrictions or content filters.

Source: Nettavisen
Date source link verified: 16/10/2026
View source
Technology in Education
NorwayNews article

Norway – pornographic content on school tablet (FVN)

A report describes pornographic content appearing on a school-issued tablet used by a child in Norway

Source: FVN
Date source link verified: 16/10/2026
View source
Technology in Education
NorwayRegulatory Action

Norwegian Regulator Warns Municipalities Over Student Data Protection Failures in Google School Platforms

The Norwegian Data Protection Authority (Datatilsynet) issued warnings of reprimand to three Norwegian municipalities for GDPR violations associated with their school-wide deployments of Google Chromebook and G Suite for Education. The regulator determined that the municipalities failed to perform adequate risk and privacy impact assessments, failed to establish a proper legal basis for data processing, and did not sufficiently inform students and parents about how their data would be processed and profiled.

Source: NKRF
Date source link verified: 16/10/2026
View source
Technology in Education
NorwayRegulatory Action

Privacy Violations in a Norwegian Municipality’s Use of the Spekter School Mapping Tool

A municipality in Agder, Norway deployed the digital mapping tool Spekter at local schools to track bullying and class environments. The tool collected non-anonymous peer-reported details identifying specific students as bullies, victims, or class disruptors, which was done without proper legal basis, transparency, or the ability for named students to access or correct the allegations. The Norwegian Data Protection Authority and the Privacy Appeals Board (Personvernnemnda) ruled the data processing unlawful, ordering the municipality to delete all collected data.

Source: Personvernnemnda
Date source link verified: 16/10/2026
View source
Technology in Education
NorwayBlog/personal post

School iPad transmitted substantial traffic to advertising networks

An IT professional analyzed a first-grade student's school iPad and found that approximately 20 to 24 percent of its traffic was associated with advertising networks. According to the account, the traffic appeared focused on behavioral tracking. The reported consequence was collection of children's data without their consent.

Source: Angeline Corvaglia
Date source link verified: 16/10/2026
View source
Technology in Education
NorwayNews article

Students at two Norwegian schools exposed to privacy risks through forced Strava app use

Students at two schools in a Norwegian municipality were instructed to use the fitness tracking app Strava as part of their school activities. The municipality failed to maintain control over how the students' personal data was processed within the app, violating GDPR. Consequently, the Norwegian Data Protection Authority issued a 50,000 NOK fine to the municipality.

Source: Tankesmien Agenda
Date source link verified: 16/10/2026
View source
Technology in Education
NorwayNews article

Unauthorized Exposure of National Identity Numbers of Norwegian University Students and Staff via Feide

A technical error in the Norwegian identity management system, Feide, resulted in the unauthorized transmission of national identity numbers to external service providers when users logged in. At a major Norwegian university, 15,019 students and staff had their national identity numbers shared, with 7,873 of those individuals having their data stored by third-party service providers without prior agreement. The university reported the incident to the national data protection authority.

Source: University of Oslo
Date source link verified: 16/10/2026
View source

About the records

Each record is a short summary of an incident described in a public source or collected through an interview by SHIELD or its partners. Records are reviewed by people before they appear here. Names and identifying details are removed: where a person appears, a role, age band and gender stand in for the name, and dates and places for minors are generalised. Every record links to its original source and shows the date that link was last checked. Records are classified with shared harm categories. The classification is SHIELD's own, so it can differ from how a source describes the incident.

Using the directory

You are welcome to read, link to and quote individual records with credit to FARO. Please do not copy, scrape or republish the dataset in bulk, or use it to train or test automated systems, without written permission. To ask for permission, use the SHIELD contact form. The original sources keep their own rights, and the link on each record leads to them.

How to cite

SHIELD-APS. Frontline Record of Online Harms (FARO). DIRECTORY-URL. Accessed [date]. To cite a particular selection, use the web address shown after you set the filters.

When you rely on the facts of an incident, cite the original source it links to. When you rely on the classification, the patterns or the country report, cite FARO. Please describe the records as documented incidents and do not present counts or country coverage as how often these harms happen. A country with few records may simply have little published about it.

Corrections and removals

If a record is wrong, a link no longer works, or you are described in a record and want it changed or removed, use the SHIELD contact form and include the title of the record. We review each request and update or remove the record where the request is justified.

Report an incident

Know of a documented incident that belongs here? Send it through the incident form. A public source, such as a news report, a court or regulator decision, or a research publication, helps us verify it quickly. Submissions without a public source are kept anonymous and are not tied to named products or companies. Please leave out the names of children and of anyone who has not agreed to be named. Submissions are reviewed before anything is published, and sending one does not guarantee a record.