News in English

The Swedish Authority for Privacy Protection (IMY) has fined Aktiebolaget Storstockholms Lokaltrafik (SL) and Waxholms Ångfartygs AB (WÅAB) for processing personal data relating to sobriety tests conducted by employees in breach fo the GDPR. IMY issues an administrative fine of SEK 75, 000 against each companies.

The Swedish Data Protection Authority (IMY) criticizes the Hospital Board in Region Uppsala, for not having taken sufficient security measures in connection with the processing of personal data about, among other things, health, in e-mail.

The Swedish Privacy Protection Authority (IMY) has done a supervision of a personal data incident at the Discrimination Ombudsman (DO). IMY concludes that the DO did not take sufficiently effective security measures and issues an administrative fine of SEK 100,000.

The Swedish Agency for Privacy Protection (IMY) has reviewed complaints concerning H&M and finds that the company has failed in its handling of requests from individuals who do not want to receive marketing from the company.

Trygg-Hansa's security flaws have meant that information about 650,000 customers has been accessible to unauthorized persons via the internet. The Swedish Authority for Privacy Protection (IMY) is now issuing an administrative fine of SEK 35 million against the company.

The Swedish Authority for Privacy Protection (IMY) has audited how four companies use Google Analytics for web statistics. IMY issues administrative fines against two of the companies. One of the companies has recently stopped using the statistics tool on its own initiative, while IMY orders the other three to also stop using it.

The Swedish Authority for Privacy Protection (IMY) has audited how Spotify handles customers' right to access their personal data. The deficiencies that have been discovered cause IMY to issue an administrative fine of SEK 58 million against the company.

A survey by the Swedish Authority for Privacy Protection (IMY) notes that less than half of responding data protection officers assess that their own organisation works continually and systematically with data protection.

The Swedish Supervisory Authority issues an administrative fine against Region Dalarna which had sent appointment letters by mail to patients with sensitive personal data visible in window envelopes.

The Swedish Authority for Privacy Protection (IMY) issues an administrative fine of SEK 7,500,000 against Klarna Bank AB after an investigation has shown that the company has not complied with several of the rules in the GDPR.