Search results

In general, it is not allowed to use video-surveillance outside of your own home or property. If you use video-surveillance to monitor areas outside of your own home or property you might need to comply with the rules of the General Data Protection Regulation (GDPR) and the Swedish Camera Surveillance Act. 

Video surveillance is a privacy-sensitive processing of personal data. As a data controller, you have several obligations towards those being monitored. Among other things, you need to ensure that you live up to the rights they have.

All organisations must comply with the applicable data protection legislation when processing personal data, regardless if you are a public authority, a small company or an association.

You can submit a whistleblower report to IMY if you have information that the organisation you currently work for, have previously worked for or are have applied to work for, is violating the General Data Protection Regulation (GDPR) or supplementary national legislation like the Data Protection Act.

The General Data Protection Regulation (GDPR) gives you several rights. Here you can find out more about what they are and how to exercise them.

Throughout your life, personal information about you is recorded. Whether you shop online, use social media, or sign up for an insurance policy, you leave behind personal information. This brings various types of risks, from harassment online to identity theft.

The Swedish Data Protection Authority (IMY) criticizes the Hospital Board in Region Uppsala, for not having taken sufficient security measures in connection with the processing of personal data about, among other things, health, in e-mail.

The Swedish Authority for Privacy Protection (IMY) has decided to impose administrative fines of SEK 37 million on Apoteket AB and SEK 8 million on Apohem AB. This comes after the companies used the so-called Meta Pixel on their websites and transferred sensitive personal data to Meta.

The Swedish Authority for Privacy Protection (IMY) has fined Aktiebolaget Storstockholms Lokaltrafik (SL) and Waxholms Ångfartygs AB (WÅAB) for processing personal data relating to sobriety tests conducted by employees in breach fo the GDPR. IMY issues an administrative fine of SEK 75, 000 against each companies.

The Swedish Privacy Protection Authority (IMY) has done a supervision of a personal data incident at the Equality Ombudsman (DO). IMY concludes that the DO did not take sufficiently effective security measures and issues an administrative fine of SEK 100,000.