Search results

Video surveillance is a privacy-sensitive processing of personal data. As a data controller, you have several obligations towards those being monitored. Among other things, you need to ensure that you live up to the rights they have.

The Swedish Data Protection Authority (IMY) criticizes the Hospital Board in Region Uppsala, for not having taken sufficient security measures in connection with the processing of personal data about, among other things, health, in e-mail.

The Swedish Privacy Protection Authority (IMY) has done a supervision of a personal data incident at the Discrimination Ombudsman (DO). IMY concludes that the DO did not take sufficiently effective security measures and issues an administrative fine of SEK 100,000.

A personal data breach is a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.

All businesses that handle personal data must comply with the General Data Protection Regulation (GDPR). This means, among other things, that you need to follow the fundamental principles, ensure that the processing has a lawful ground and inform the data subjects about how you handle their personal data.

The Patient Data Act supplements the General Data Protection Regulation (GDPR) and contains rules for the processing of personal data in healthcare. The Patient Data Act must be applied by all healthcare providers, both public and private.

If you think that someone is processing your personal data incorrectly you can file a complaint to the Swedish Authority for Privacy Protection (IMY) using our e-service.

Personal data within law enforcement is governed by special laws.