Everyone should be able to act safely and independently online. Before each year, IMY decides which areas the authority will prioritise in its guidance and supervision work. These areas are selected based on IMY's observation that there are significant privacy risks or a need for increased knowledge to improve compliance.
“Data protection is important throughout society, and almost all organisations – private, public and non-profit – handle personal data on a daily basis. There are different challenges, and IMY assesses that the risks are greater in some areas than in others. We therefore prioritise areas where our efforts can make the most difference”, says Eric Leijonram, Director General of IMY.
The use of AI in the public sector
The public sector is increasingly introducing AI. As citizens in contact with public services, we often have no alternative to choose from and it can be difficult to avoid. It is therefore important that the public sector works actively with data protection, including when it comes to AI. When AI systems also handle sensitive personal data, high demands are placed on privacy protection. During this year, IMY will focus on following up on how the public sector uses AI to support public services in their use of the technology in a manner that protects privacy.
Data protection for children and young people
Children and young people are diligent users of digital services. Many use the internet, social media and apps on a daily basis without fully understanding the risks. In addition, their personal data merit specific protection. During the year, IMY will work to increase awareness of how children and young people can protect their personal data, both among young people themselves and among adults who handle their data, such as guardians and schools.
Tools in law enforcement from a data protection perspective
Law enforcement agencies need effective tools in their mission to prevent and solve crimes. Some of these tools involve significant restrictions on individuals' right to privacy. In recent years, new tools have also been added, such as secret coercive measures and the collection of biometric data. During the year, IMY will focus on law enforcement tools from a data protection perspective.
IMY's supervision and guidance
IMY guides and investigates authorities, companies and organisations to facilitate and verify that they fulfil their data protection responsibilities. Through guidance, organisations receive relevant and clear support for handling personal data correctly. Through supervision, IMY checks that the GDPR is being complied with and issues corrective measures, such as penalty fees, if an audit reveals violations.
For more information, please contact
Media service: + 46 8-515 154 15
More news on this topic
-
Administrative fine against Sportadmin
28 January 2026 -
Administrative fines against two companies in the SL Group
3 July 2025 -
Administrative fine against the Equality Ombudsman when personal data was collected via a web form
12 May 2025 -
The Hospital Board has failed in its security measures when handling e-mail
12 May 2025
More news on this topic
-
Administrative fine against Sportadmin
28 January 2026 -
Administrative fines against two companies in the SL Group
3 July 2025 -
Administrative fine against the Equality Ombudsman when personal data was collected via a web form
12 May 2025 -
The Hospital Board has failed in its security measures when handling e-mail
12 May 2025