Do we have to report all personal data breaches to IMY?

No, you do not need to notify all personal data breaches to IMY. If the breach is unlikely to result in a risk to the rights and freedoms of natural persons, it does not need to be reported to us. Even if you decide to not notify us, you are however still required to document any personal data breaches, comprising the facts relating to the personal data breach, its effects and the remedial action taken.

Personal Data Breach (in Swedish)

Notification of a personal data breach