Telephone guidance

For you as a private individual

In our telephone guidance we can answer general questions about what rights you have as a private individual according to the General Data Protection Regulation. More detailed information is available on our website.

Your rights

For organisations

The data subject, i.e. the person whose personal data is processed, has a number of rights under the General Data Protection Regulation. Our website provides information on data subjects' rights directed towards organisations.

Rights of data subjects 

For you as a private individual

If you would rather read about how you can request to exercise any of your rights, for example how to request erasure of your personal data, there is information and in some cases also letter templates that you can use (in Swedish).

Right to erasure of your personal data
Right to rectification
Right of access
Right to information
Right to limitation of processing
Right to object
Automated decisions
Right to move your personal data
Applies to all rights

For organisations

The data subject, i.e. the person whose personal data is being processed, has a number of rights under the GDPR. As a data controller, you have a responsibility to have procedures in place to deal with requests to exercise these rights when someone requests it.

The rights of data subjects

We cannot answer questions in individual cases, but can answer what the Camera Surveillance Act and the General Data Protection Regulation generally require for camera surveillance to be legal. More detailed information with examples is available on our website.

For you as a private individual
As a private individual, you can both be camera monitored and want to use camera surveillance, for example to monitor your own property.

You do not need to apply for a permit to monitor cameras. Whether the camera surveillance you plan is allowed or not depends on the location you want to monitor. It is therefore what is captured on film that determines whether your planned surveillance is legal.

Private individuals' camera surveillance

Are you being monitored? Under the General Data Protection Regulation, you have several rights that you can exercise if you are being monitored.

Your rights as a person under surveillance (in Swedish)

For organisations

The General Data Protection Regulation and the Camera Surveillance Act apply to permanent or regularly repeated personal surveillance as it involves personal data processing. From 1 April 2025, no one needs to apply for a permit for camera surveillance from IMY.

Please read more about the rules on camera surveillance on our pages for organisations. 

Camera surveillance for organisations  

Assess whether camera surveillance is allowed (in Swedish)

How to balance interests in different places (in Swedish) 

IMY is the supervisory authority for the Credit Information Act and issues licences for those who wish to conduct credit information. We can only provide general information about what applies under the Credit Information Act.

For you as a private individual

Anyone who lends money or grants other types of credit needs a good basis for assessing whether to grant you credit. Find out more on our website.

Credit Information

Complain about a credit reference agency (in Swedish)

For organisations

Apply for a credit information licence (in Swedish)

Credit information licence holders (in Swedish)
 

We cannot answer questions about the lawfulness of a specific personal data processing. We can only provide general information about what applies. Our website provides detailed information on the General Data Protection Regulation, including explanations of the concepts of lawful grounds and fundamental principles. You will also find examples that may be helpful.

For you as a private individual  

Introduction to the General Data Protection Regulation

For organisations

All organisations that process personal data must comply with the General Data Protection Regulation. This means, among other things, that you need to comply with the fundamental principles, ensure that the processing has a lawful ground and inform data subjects about how you process their personal data.

Introduction to the General Data Protection Regulation

For organisations

The consequences of a personal data breach can be serious both for your organisation and for the individuals affected by the breach. It is therefore important to work proactively and systematically to prevent breaches. If a personal data breach does occur, your organisation needs to have procedures for how to handle it effectively.

Handling personal data breaches (in Swedish)