Search results

Throughout your life, personal information about you is recorded. Whether you shop online, use social media, or sign up for an insurance policy, you leave behind personal information. This brings various types of risks, from harassment online to identity theft.

Personal data is any kind of information that can be linked to a living person.

We work to protect all your personal data, such as information about your health and finances, ensuring it is handled properly and does not fall into the wrong hands. Here you can read more about our mission and how we operate.

Swedish Authority for Privacy Protection (IMY) has about 150 employees, most of whom are lawyers. Our organisation reflects our areas of operations and the way we work.

All businesses that handle personal data must comply with the General Data Protection Regulation (GDPR). This means, among other things, that you need to follow the fundamental principles, ensure that the processing has a lawful ground and inform the data subjects about how you handle their personal data.

If you think that someone is using camera surveillance unlawfully you can file a complaint to the Swedish Authority for Privacy Protection (IMY) using our e-service.

A personal data breach is a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.

If you think that someone is processing your personal data incorrectly you can file a complaint to the Swedish Authority for Privacy Protection (IMY) using our e-service.

Are you, as an employer, considering using video-surveillance of a workplace? Remember that all video-surveillance entails an infringement of privacy and that employees in general have a right not to be monitored at work. Therefore, you need strong reasons as to why it is necessary to monitor employees at their place of work. Here you will find out more of what rules apply.

If you carry out video-surveillance you need to provide information regarding the surveillance in an intelligible and easily accessible way. The General Data Protection Regulation (GDPR) lists a number of requirements of what this information needs to contain.