Search results

I hela ditt liv registreras personuppgifter om dig. Oavsett om du handlar på nätet, använder sociala medier eller tecknar en försäkring så lämnar du efter dig personuppgifter.

The Swedish Authority for Privacy Protection (IMY) has supervised the company Sportadmin following an IT attack in which a large volume of personal data was leaked. The review shows that Sportadmin did not have an appropriate level of security to protect the personal data the company processed. IMY therefore decides to impose an administrative fine of SEK 6 million.

A personal data breach is a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.

Law enforcement authorities shall carry out an impact assessment before any new type of processing of personal data or if there have been significant changes to ongoing processing of personal data. This is only necessary if the processing is likely to result in a specific risk to the privacy of the data subject.

Have you made an impact assessment and still consider that the processing of personal data poses a high risk to the rights and freedoms of individuals? Then you should request a prior consultation before you start processing.

If you think that someone is processing your personal data incorrectly you can file a complaint to the Swedish Authority for Privacy Protection (IMY) using our e-service.

You can submit a whistleblower report to IMY if you have information that the organisation you currently work for, have previously worked for or have applied to work for, is violating the General Data Protection Regulation (GDPR) or supplementary national legislation like the Data Protection Act.

Read about the data subject's rights according to the GDPR.

All organisations must comply with the applicable data protection legislation when processing personal data, regardless if you are a public authority, a small company or an association.

All businesses that handle personal data must comply with the General Data Protection Regulation (GDPR). This means, among other things, that you need to follow the fundamental principles, ensure that the processing has a lawful ground and inform the data subjects about how you handle their personal data.