Search results

In general, it is not allowed to use video-surveillance outside of your own home or property. If you use video-surveillance to monitor areas outside of your own home or property you might need to comply with the rules of the General Data Protection Regulation (GDPR) and the Swedish Camera Surveillance Act. 

The Swedish Data Protection Authority (IMY) criticizes the Hospital Board in Region Uppsala, for not having taken sufficient security measures in connection with the processing of personal data about, among other things, health, in e-mail.

Video surveillance is a privacy-sensitive processing of personal data. As a data controller, you have several obligations towards those being monitored. Among other things, you need to ensure that you live up to the rights they have.

Throughout your life, personal information about you is recorded. Whether you shop online, use social media, or sign up for an insurance policy, you leave behind personal information. This brings various types of risks, from harassment online to identity theft.

All organisations must comply with the applicable data protection legislation when processing personal data, regardless if you are a public authority, a small company or an association.

The Swedish Privacy Protection Authority (IMY) has done a supervision of a personal data incident at the Discrimination Ombudsman (DO). IMY concludes that the DO did not take sufficiently effective security measures and issues an administrative fine of SEK 100,000.

Personal data is any kind of information that can be linked to a living person.

All businesses that handle personal data must comply with the General Data Protection Regulation (GDPR). This means, among other things, that you need to follow the fundamental principles, ensure that the processing has a lawful ground and inform the data subjects about how you handle their personal data.

A personal data breach is a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.