Search results

All organisations must comply with the applicable data protection legislation when processing personal data, regardless if you are a public authority, a small company or an association.

Throughout your life, personal information about you is recorded. Whether you shop online, use social media, or sign up for an insurance policy, you leave behind personal information. This brings various types of risks, from harassment online to identity theft.

In general, it is not allowed to use video-surveillance outside of your own home or property. If you use video-surveillance to monitor areas outside of your own home or property you might need to comply with the rules of the General Data Protection Regulation (GDPR) and the Swedish Camera Surveillance Act. 

Law enforcement authorities shall carry out an impact assessment before any new type of processing of personal data or if there have been significant changes to ongoing processing of personal data. This is only necessary if the processing is likely to result in a specific risk to the privacy of the data subject.

Video surveillance is a privacy-sensitive processing of personal data. As a data controller, you have several obligations towards those being monitored. Among other things, you need to ensure that you live up to the rights they have.

You can submit a whistleblower report to IMY if you have information that the organisation you currently work for, have previously worked for or have applied to work for, is violating the General Data Protection Regulation (GDPR) or supplementary national legislation like the Data Protection Act.

A personal data breach is a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.

Personal data is any kind of information that can be linked to a living person.

Read about the data subject's rights according to the GDPR.

Personal data shall not be kept longer than necessary for the purposes of the processing. When the purposes of a particular data processing are fulfilled, the main rule is therefore that the data in q