Search results

The Swedish Privacy Protection Authority (IMY) has done a supervision of a personal data incident at the Equality Ombudsman (DO). IMY concludes that the DO did not take sufficiently effective security measures and issues an administrative fine of SEK 100,000.

When you enter our website imy.se, no cookies are set. However, cookies are set if you use our e-services, quiz feature, forms or make your own settings in our listening function.

Data protection by design and data protection by default is a requirement for all data controllers, and applies to companies of all sizes. The term privacy by design and by default is also used when talking about data protection by design and by default.

Read about the data subject's rights according to the GDPR.

An organisation that processes personal data is in certain cases required to designate a data protection officer. The role of the data protection officer is to check that the General Data Protection Regulation is complied with within the organisation by means of, for example, conducting checks and providing information. On this page you can find out more about data protection officers.

All care providers are to follow up logs systematically, meaning that they are to log activities in the systems where the patient data is processed. The systems are to be designed to be able to check

All organisations must comply with the applicable data protection legislation when processing personal data, regardless if you are a public authority, a small company or an association.

A personal data breach is a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.

The following is a brief description of what anyone interested in the use of video-surveillance must consider.

In January 2025, the Swedish Agency for Digital Government (Digg) together with the Swedish Authority for Privacy Protection (IMY) launched guidelines to encourage the use of generative AI in public administration. The purpose of the guidelines is to enhance the ability to use generative AI in a safe, ethical and efficient way.