Search results

The primary purpose of the Credit Information Act is to protect data subjects' personal privacy but the law is also to contribute to efficient provision of credit information.

The primary purpose of the Credit Information Act is to protect data subjects' personal privacy but the law is also to contribute to efficient provision of credit information.

A licence from the Swedish Authority for Privacy Protection is normally required to operate credit reference activities. We decide on licences to operate credit reference activities only if the activities can be assumed to be carried on in a knowledgeable and judicious manner. Our evaluation is based on the type and scope of the planned activities.

On this page you will find answers to the most frequently asked questions that IMY receives about payment default records.

The Swedish DPA has issued an administrative fine of 35 000 EUR against Mrkoll.se – a website that publishes personal data of all Swedes above the age of 16 – for infringement of the Credit Information Act and the GDPR. The website has carried out credit information activity in a way that is not in compliance with the law.

Announce that you have a data protection officer Notification of a personal data breach Apply for a permit to operate debt-collection activities Apply for a credit reference licence   EnglishBlock...

The Swedish Authority for Privacy Protection (IMY) issues an administrative fine of SEK 7,500,000 against Klarna Bank AB after an investigation has shown that the company has not complied with several of the rules in the GDPR.

The Swedish government has designated the Swedish Authority for Privacy Protection to be the supervisory authority under the General Data Protection Regulation.

If you think that someone is processing your personal data incorrectly you can file a complaint to the Swedish Authority for Privacy Protection (IMY) using our e-service.

Debt-collection activities relating to the recovery of financial claims on behalf of others or claims that have been transferred for collection may, as a general rule, only be conducted with the permission of the Swedish Authority for Privacy Protection (IMY).