Search results

The Swedish Authority for Privacy Protection (IMY) has audited how Spotify handles customers' right to access their personal data. The deficiencies that have been discovered cause IMY to issue an administrative fine of SEK 58 million against the company.

The Swedish Privacy Protection Authority (IMY) has done a supervision of a personal data incident at the Equality Ombudsman (DO). IMY concludes that the DO did not take sufficiently effective security measures and issues an administrative fine of SEK 100,000.

The Swedish Authority for Privacy Protection (IMY) has supervised the company Sportadmin following an IT attack in which a large volume of personal data was leaked. The review shows that Sportadmin did not have an appropriate level of security to protect the personal data the company processed. IMY therefore decides to impose an administrative fine of SEK 6 million.

Swedish Authority for Privacy Protection (IMY) has about 160 employees, most of whom are lawyers. Our organisation reflects our areas of operations and the way we work.

Artificial intelligence (AI) is a rapidly evolving and highly relevant field. The General Data Protection Regulation (GDPR) and the AI Act, among others, regulate the area and can contribute to safe, efficient and ethical development and use of AI.

Artificial intelligence (AI) is a rapidly evolving and highly relevant field. The General Data Protection Regulation (GDPR) and the AI Act, among others, regulate the area and can contribute to safe, efficient and ethical development and use of AI.

The Swedish Authority for Privacy Protection (IMY) is focusing on three areas in its guidance and supervision during 2026. These areas are crime prevention, children and young people, and AI in the public sector.

On this page you will find answers to the most frequently asked questions that IMY receives about payment default records.