Search results

The Swedish Privacy Protection Authority (IMY) has done a supervision of a personal data incident at the Equality Ombudsman (DO). IMY concludes that the DO did not take sufficiently effective security measures and issues an administrative fine of SEK 100,000.

The Swedish Authority for Privacy Protection (IMY) has supervised the company Sportadmin following an IT attack in which a large volume of personal data was leaked. The review shows that Sportadmin did not have an appropriate level of security to protect the personal data the company processed. IMY therefore decides to impose an administrative fine of SEK 6 million.

If you carry out video-surveillance you need to provide information regarding the surveillance in an intelligible and easily accessible way. The General Data Protection Regulation (GDPR) lists a number of requirements of what this information needs to contain.

If you think that someone is processing your personal data incorrectly you can file a complaint to the Swedish Authority for Privacy Protection (IMY) using our e-service.

You can submit a whistleblower report to IMY if you have information that the organisation you currently work for, have previously worked for or have applied to work for, is violating the General Data Protection Regulation (GDPR) or supplementary national legislation like the Data Protection Act.

The GDPR states that both the data controller and the data processor are obliged to maintain a record or a list of instances of personal data processing.

If you think that someone is using camera surveillance unlawfully you can file a complaint to the Swedish Authority for Privacy Protection (IMY) using our e-service.

Are you planning to use video-surveillance? Organisations that use video-surveillance need to comply with the rules in the General Data Protection Regulation (GDPR) and the Camera Surveillance Act. The rules are different depending on your organisation and the location being monitored.

In January 2025, the Swedish Agency for Digital Government (Digg) together with the Swedish Authority for Privacy Protection (IMY) launched guidelines to encourage the use of generative AI in public administration. The purpose of the guidelines is to enhance the ability to use generative AI in a safe, ethical and efficient way.

Trygg-Hansa's security flaws have meant that information about 650,000 customers has been accessible to unauthorized persons via the internet. The Swedish Authority for Privacy Protection (IMY) is now issuing an administrative fine of SEK 35 million against the company.