Search results

The Swedish Authority for Privacy Protection is responsible for the processing of personal data for which the authority determines the purpose and means. The authority processes, for example, personal data in the handling of the authority's business, in the handling of questions and in the administration of courses and subscriptions.

Read about the data subject's rights according to the GDPR.

Law enforcement authorities shall carry out an impact assessment before any new type of processing of personal data or if there have been significant changes to ongoing processing of personal data. This is only necessary if the processing is likely to result in a specific risk to the privacy of the data subject.

We work to protect all your personal data, such as information about your health and finances, ensuring it is handled properly and does not fall into the wrong hands. Here you can read more about our mission and how we operate.

Have you made an impact assessment and still consider that the processing of personal data poses a high risk to the rights and freedoms of individuals? Then you should request a prior consultation before you start processing.

Here are all the forms that you, as a representative of an organisation, can use. Read our information carefully before filling in a form.

Here you can read more about, and notify personal data breaches, according to the Criminal Data Act.

You can submit a whistleblower report to IMY if you have information that the organisation you currently work for, have previously worked for or have applied to work for, is violating the General Data Protection Regulation (GDPR) or supplementary national legislation like the Data Protection Act.

You can contact us by e-mail, regular post or call us.

Artificial intelligence (AI) is a rapidly evolving and highly relevant field. The General Data Protection Regulation (GDPR) and the AI Act, among others, regulate the area and can contribute to safe, efficient and ethical development and use of AI.