Search results

The Swedish Privacy Protection Authority (IMY) has done a supervision of a personal data incident at the Equality Ombudsman (DO). IMY concludes that the DO did not take sufficiently effective security measures and issues an administrative fine of SEK 100,000.

The Swedish Authority for Privacy Protection (IMY) has supervised the company Sportadmin following an IT attack in which a large volume of personal data was leaked. The review shows that Sportadmin did not have an appropriate level of security to protect the personal data the company processed. IMY therefore decides to impose an administrative fine of SEK 6 million.

You can submit a whistleblower report to IMY if you have information that the organisation you currently work for, have previously worked for or have applied to work for, is violating the General Data Protection Regulation (GDPR) or supplementary national legislation like the Data Protection Act.

Here you can read more about, and notify personal data breaches, according to the Criminal Data Act.

You can contact us by e-mail, regular post or call us.

Here you will find our logotype, photos of our director general and miscellaneous photos from our office. The material may be used freely for editorial purposes but may not be modified. The material may not be used commercially without our permission. If you need other photos than those below, please contact IMY's media service.

Law enforcement authorities shall carry out an impact assessment before any new type of processing of personal data or if there have been significant changes to ongoing processing of personal data. This is only necessary if the processing is likely to result in a specific risk to the privacy of the data subject.

Swedish Authority for Privacy Protection (IMY) has about 160 employees, most of whom are lawyers. Our organisation reflects our areas of operations and the way we work.