Hvelv Misses Deadline; Ombud Sends Firm to Attorney General
Last two days of recordings never arrive; finding says the server was switched off three days after the firm’s own alarm flagged the sessions; Speaker will meet party leaders today but sets no date
The deadline passed at noon. The recordings did not arrive.
At 16:30 on Wednesday, Privacy Ombud Henrik Salo published his finding. The compulsory production orders served on Hvelv Systems on 1 October “have not been met”. He has referred the firm’s failure to the Attorney General.
The session recordings for 14 and 15 July, the last two days of the breach, were never filed. At 11:40, twenty minutes before the window closed, Hvelv asked for three more days. The Ombud’s office said no.
The finding also answered a question Hvelv would not. The contract server holding those two days was switched off on 27 August. Three days earlier, on 24 August, Hvelv’s own monitoring system had raised an automated alert on the same sessions. Nobody passed the alert on.
Hvelv says it identified the breach on 2 September. The Ombud did not dispute that date. But on his account, the firm’s systems noticed before the firm did.
Hvelv said in a statement at 19:10 that the server was “decommissioned on a schedule set before any concern arose”. It said no recording had been “knowingly destroyed” and that it would cooperate fully with the Attorney General. Chief executive Oskar Brandvold did not appear.
First Minister Erik Halvorsen spoke briefly at Thing Square. “Hvelv had a deadline and a chart. It missed both,” he said. “What happens to the firm is now a question for the Attorney General. The Archive is the question before us.”
The office of Speaker Marta Okimaw-Strand said she had received the finding and would read it in full. She will meet party leaders in the Provincial Thing today. No date has been set for the Archive sitting to resume.
How the window closed, page 2. The finding in extract, page 2. The Herald’s View, Opinion.