Search results

Data protection by design and data protection by default is a requirement for all data controllers, and applies to companies of all sizes. The term privacy by design and by default is also used when talking about data protection by design and by default.

Information security first and foremost involves preventing information from being leaked, distorted and destroyed. It also involves ensuring that information is to be available to the right people and at the right time. Information is not to be able to fall into the wrong hands and be misused. The data subjects are to know who is using their personal data and why.

Swedish Authority for Privacy Protection (IMY) supervises law enforcement authorities.

There is a difference between general personal data and sensitive personal data.

Companies often have operations in several countries and personal data does not always stay in one country. An instance of personal data processing that has a connection to more than one member state of the EU is called cross-border processing.

The Swedish Authority for Privacy Protection (IMY) has audited how Spotify handles customers' right to access their personal data. The deficiencies that have been discovered cause IMY to issue an administrative fine of SEK 58 million against the company.

We translate some of our news into English. Please visit the news page in Swedish for all our news.