Search results

The Debt Recovery Act contains provisions that apply to persons and entities that carry on debt recovery activities.

The Swedish Authority for Privacy Protection finds that the Swedish Police Authority has processed personal data in breach of the Swedish Criminal Data Act when using Clearview AI to identify individuals.

The primary purpose of the Credit Information Act is to protect data subjects' personal privacy but the law is also to contribute to efficient provision of credit information.

What is meant by privacy? What is personal data? We will try to explain these terms.

Announce that you have a data protection officer Notification of a personal data breach Apply for a permit to operate debt-collection activities Apply for a credit reference licence   EnglishBlock...

We translate some of our news into English.

Anyone who processes personal data is either a data controller or a data processor. A data controller is any person or entity that determines the purposes and means of the processing. A data processor is any person or entity that processes personal data on behalf of a data controller.

You should report the personal data breach within 72 hours after having become aware of it. If all information is not available, you may provide supplementary information within four weeks.

Umeå University has processed special categories of personal data concerning sexual life and health through, amongst other, storage in a cloud service, without sufficiently protecting the data. Swedish Authority for Privacy Protection is therefore issuing a fine of SEK 550,000 against the university.

Swedish Authority for Privacy Protection often receives questions and reports concerning areas that do not belong to our field of operations. Here is a summary of the most common areas with details of the appropriate authority to contact.