Search results

Data protection by design and data protection by default is a requirement for all data controllers, and applies to companies of all sizes. The term privacy by design and by default is also used when talking about data protection by design and by default.

Information security first and foremost involves preventing information from being leaked, distorted and destroyed. It also involves ensuring that information is to be available to the right people and at the right time. Information is not to be able to fall into the wrong hands and be misused. The data subjects are to know who is using their personal data and why.

IMY issues an administrative fine of in total SEK 1.9 million against Region Uppsala after finding that the region has not taken appropriate security measures in its handling of sensitive personal data.

Swedish Authority for Privacy Protection has audited eight health care providers in how they govern and restrict personnel’s access to the main systems for electronic health records. The DPA has discovered insufficiencies that in seven of the eight cases lead to administrative fines of up to SEK 30 million.

Swedish Authority for Privacy Protection has reviewed the so-called School Platform, the IT system used for, among other things, student administration of schools in the City of Stockholm. The review shows an insufficient level of security of such grave nature that the authority issues an administrative fine of four million SEK against the Board of Education in the City of Stockholm.

Umeå University has processed special categories of personal data concerning sexual life and health through, amongst other, storage in a cloud service, without sufficiently protecting the data. Swedish Authority for Privacy Protection is therefore issuing a fine of SEK 550,000 against the university.

The Swedish Authority for Privacy Protection (IMY) has finalized its investigation of an incident where recorded phone calls to the medical consultation service, 1177, were available unprotected on the Internet.