Skip to content

Our mission

IMY is Sweden’s data protection authority. Our mission is to work to ensure that individuals’ fundamental rights and freedoms are protected in connection with the processing of personal data.

We are the supervisory authority according to the

  • General Data Protection Regulation (GDPR)
  • Criminal Data Act
  • Camera Surveillance Act
  • Credit Information Act

We monitor that rules are complied with and provide guidance, support and information to organisations and individuals. We follow, analyse and describe it-development when it comes to matters that regards privacy and new technology. We contribute to the law-making process by participating as experts in committees of inquiry and responding to consultations.

Our mission is also to facilitate the free flow of personal data within the European union and to promote observance of good practice in credit information activity.

Our main tasks

  • We provide guidance and spread knowledge about data protection rules, both to organisations that process personal data and to those whose data are processed.
  • We carry out awareness raising activities and engage in dialogue with organisations in order to explain how the legal framework works in practice.
  • We publish guidance, guides and other information material that makes it easier for organisations to follow the data protection rules.
  • We work preventively with, for example, prior consultations.
  • We run an innovation sand box, where various stakeholders get the opportunity to test their solutions against the legal framework in collaboration with IMY.
  • We collaborate with other authorities.
  • When new laws and other rules are drafted, we monitor that individuals’ privacy is protected.
  • We issue our own regulations with general provisions and publish general advice with recommendations on various matters.

Guidance for organisations (in Swedish)

Guidance on the GDPR in innovation projects

Guidance and supervision priorities 2026 (in Swedish)

  • We supervise that the data protection regulation (GDPR) and other data protection rules are complied with.
  • We supervise that the provisions in the Criminal Data Act and the Camera Surveillance Act are complied with.
  • We monitor that those who carry out credit information activity follows good business practice.
  • Our audits may result in administrative fines.

How we work with supervision (in Swedish)

What can supervision lead to? 

Guidance and supervision priorities 2026 (in Swedish)

We participate actively in the European Data Protection Board (EDPB) and contribute to guidance, joint decisions and coordinated supervisory activities. This strengthens the harmonisation of data protection within the EU.

We have had, for a long time, a close collaboration with the data protection authorities in the Nordic countries. We meet once a year and have set up several working groups within the framework of this cooperation.

We have also developed an international cooperation with data protection authorities from many parts of the world. Through international cooperation we can raise the Swedish perspective in European discussions and take part in the exchange of experiences with other countries.

Our international mission (in Swedish)

We handle complaints from individuals who think that their personal data has been wrongly processed. We also receive notifications about data breaches from controllers.

Complain about incorrect processing of your personal data

 

Specific tasks

Reporting channel for external whistle blowing

The Government has appointed IMY as the competent authority for whistle blowing about misconduct that implies a breach of the data protection regulation, legislation that implements or supplements the data protection regulation or the aim or objective of the data protection regulation. This could, for example, refer to cases where an employee wants to report that their work place does not comply with data protection rules.

Who can submit a whistle blower report and how to do it

Questions outside the scope of our assignment

 

 

About the information on this page

If the information in English is different from the Swedish version of this page, the Swedish version applies.

Latest update: 29 May 2026
Page labels Om IMY