News in English

The Swedish Agency for Privacy Protection (IMY) has reviewed complaints concerning H&M and finds that the company has failed in its handling of requests from individuals who do not want to receive marketing from the company.

Trygg-Hansa's security flaws have meant that information about 650,000 customers has been accessible to unauthorized persons via the internet. The Swedish Authority for Privacy Protection (IMY) is now issuing an administrative fine of SEK 35 million against the company.

The Swedish Authority for Privacy Protection (IMY) has audited how four companies use Google Analytics for web statistics. IMY issues administrative fines against two of the companies. One of the companies has recently stopped using the statistics tool on its own initiative, while IMY orders the other three to also stop using it.

The Swedish Authority for Privacy Protection (IMY) has audited how Spotify handles customers' right to access their personal data. The deficiencies that have been discovered cause IMY to issue an administrative fine of SEK 58 million against the company.

A survey by the Swedish Authority for Privacy Protection (IMY) notes that less than half of responding data protection officers assess that their own organisation works continually and systematically with data protection.

The Swedish Supervisory Authority issues an administrative fine against Region Dalarna which had sent appointment letters by mail to patients with sensitive personal data visible in window envelopes.

The Swedish Authority for Privacy Protection (IMY) issues an administrative fine of SEK 7,500,000 against Klarna Bank AB after an investigation has shown that the company has not complied with several of the rules in the GDPR.

The Swedish Authority for Privacy Protection (IMY) has investigated a personal data breach within the Swedish Customs and notes that the agency has had deficient routines and insufficient technical barriers, which has led to data from criminal investigations being transferred from staff mobile phones to a US cloud service.

IMY issues an administrative fine of in total SEK 1.9 million against Region Uppsala after finding that the region has not taken appropriate security measures in its handling of sensitive personal data.

The Swedish Authority for Privacy Protection (IMY) has investigated the use of camera surveillance at a number of fire stations in Östra Skaraborg and notes that 24/7 surveillance of the staff is too far-reaching.