Search results

The Swedish Privacy Protection Authority (IMY) has done a supervision of a personal data incident at the Equality Ombudsman (DO). IMY concludes that the DO did not take sufficiently effective security measures and issues an administrative fine of SEK 100,000.

It is common that individuals of the general public use video-surveillance on their own property. The so-called "domestic purpose exemption" means that the rules of GDPR do not apply when using video-surveillance in your capacity as a private citizen or in connection to your personal household. Sometimes it is hard to know when the exemption applies. Following you will find a guide on what applies when it comes to video-surveillance and the domestic purpose exemption.

The Swedish Authority for Privacy Protection (IMY) has supervised the company Sportadmin following an IT attack in which a large volume of personal data was leaked. The review shows that Sportadmin did not have an appropriate level of security to protect the personal data the company processed. IMY therefore decides to impose an administrative fine of SEK 6 million.

You can call IMY for guidance on general questions within the scope of our assignment. We cannot give you binding information or answers to questions in individual cases. Neither can we answer whether, for example, a particular personal data processing is lawful or whether a camera surveillance is carried out correctly.

Our website is divided according to whether you are looking for information as an individual or as a representative of an organisation. Select one of the entries in the menu and you will see the information that applies to you.

Swedish Authority for Privacy Protection has issued an administrative fine of SEK 300,000 against a housing company for unlawful video surveillance in an apartment building.

On this page you will find answers to the most frequently asked questions that IMY receives about payment default records.

The following is a brief description of what anyone interested in the use of video-surveillance must consider.

The Swedish Authority for Privacy Protection is responsible for the processing of personal data for which the authority determines the purpose and means. The authority processes, for example, personal data in the handling of the authority's business, in the handling of questions and in the administration of courses and subscriptions.

Swedish Authority for Privacy Protection (DPA) has investigated a co-operative housing association’s use of video surveillance on its property. The DPA concludes that the association has gone too far when using video surveillance in the main entrance and the stairwell and when recording audio.