Search results

The Swedish Authority for Privacy Protection (IMY) has fined Aktiebolaget Storstockholms Lokaltrafik (SL) and Waxholms Ångfartygs AB (WÅAB) for processing personal data relating to sobriety tests conducted by employees in breach fo the GDPR. IMY issues an administrative fine of SEK 75, 000 against each companies.

The Swedish Authority for Privacy Protection (IMY) has decided to impose administrative fines of SEK 37 million on Apoteket AB and SEK 8 million on Apohem AB. This comes after the companies used the so-called Meta Pixel on their websites and transferred sensitive personal data to Meta.

The General Data Protection Regulation (GDPR) gives you several rights. Here you can find out more about what they are and how to exercise them.

Artificial intelligence (AI) is a rapidly evolving and highly relevant field. The General Data Protection Regulation (GDPR) and the AI Act, among others, regulate the area and can contribute to safe, efficient and ethical development and use of AI.

In general, it is not allowed to use video-surveillance outside of your own home or property. If you use video-surveillance to monitor areas outside of your own home or property you might need to comply with the rules of the General Data Protection Regulation (GDPR) and the Swedish Camera Surveillance Act. 

Here you will find our logotype, photos of our director general and miscellaneous photos from our office. The material may be used freely for editorial purposes but may not be modified. The material may not be used commercially without our permission. If you need other photos than those below, please contact IMY's media service.

If you believe that a credit reference agency has information about you in its records that is incorrect or misleading, you can contact the agency and ask for a correction.

The Swedish Privacy Protection Authority (IMY) has done a supervision of a personal data incident at the Equality Ombudsman (DO). IMY concludes that the DO did not take sufficiently effective security measures and issues an administrative fine of SEK 100,000.

The Swedish Data Protection Authority (IMY) criticizes the Hospital Board in Region Uppsala, for not having taken sufficient security measures in connection with the processing of personal data about, among other things, health, in e-mail.

You can call IMY for guidance on general questions within the scope of our assignment. We cannot give you binding information or answers to questions in individual cases. Neither can we answer whether, for example, a particular personal data processing is lawful or whether a camera surveillance is carried out correctly.