Search results

The Swedish Authority for Privacy Protection (IMY) is focusing on three areas in its guidance and supervision during 2026. These areas are crime prevention, children and young people, and AI in the public sector.

A personal data breach is a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.

If you think that someone is processing your personal data incorrectly you can file a complaint to the Swedish Authority for Privacy Protection (IMY) using our e-service.

If you think that someone is using camera surveillance unlawfully you can file a complaint to the Swedish Authority for Privacy Protection (IMY) using our e-service.

The Swedish Authority for Privacy Protection (IMY) has supervised the company Sportadmin following an IT attack in which a large volume of personal data was leaked. The review shows that Sportadmin did not have an appropriate level of security to protect the personal data the company processed. IMY therefore decides to impose an administrative fine of SEK 6 million.

Swedish Authority for Privacy Protection (IMY) has about 160 employees, most of whom are lawyers. Our organisation reflects our areas of operations and the way we work.

No, IMY cannot delete your personal data for you. A common misunderstanding is that IMY can delete your personal data regardless of where it is processed. This is not the case. IMY only holds data abo

The Swedish Authority for Privacy Protection is responsible for the processing of personal data for which the authority determines the purpose and means. The authority processes, for example, personal data in the handling of the authority's business, in the handling of questions and in the administration of courses and subscriptions.

When you enter our website imy.se, no cookies are set. However, cookies are set if you use our e-services, quiz feature, forms or make your own settings in our listening function.

Read about the data subject's rights according to the GDPR.