Search results

The primary purpose of the Credit Information Act is to protect data subjects' personal privacy but the law is also to contribute to efficient provision of credit information.

The primary purpose of the Credit Information Act is to protect data subjects' personal privacy but the law is also to contribute to efficient provision of credit information.

A licence from the Swedish Authority for Privacy Protection is normally required to operate credit reference activities. We decide on licences to operate credit reference activities only if the activities can be assumed to be carried on in a knowledgeable and judicious manner. Our evaluation is based on the type and scope of the planned activities.

Swedish Authority for Privacy Protection (IMY) supervises law enforcement authorities.

On this page you will find answers to the most frequently asked questions that IMY receives about payment default records.

The Swedish DPA has issued an administrative fine of 35 000 EUR against Mrkoll.se – a website that publishes personal data of all Swedes above the age of 16 – for infringement of the Credit Information Act and the GDPR. The website has carried out credit information activity in a way that is not in compliance with the law.

Personal data within law enforcement is governed by special laws.

You can file a GDPR-complaint or request a lawfulness check by filling out our complaint form.

The Swedish government has designated the Swedish Authority for Privacy Protection to be the supervisory authority under the General Data Protection Regulation.

An organisation that processes personal data is in certain cases required to designate a data protection officer. The role of the data protection officer is to check that the General Data Protection Regulation is complied with within the organisation by means of, for example, conducting checks and providing information. On this page you can find out more about data protection officers.