Search results

The Swedish Privacy Protection Authority (IMY) has done a supervision of a personal data incident at the Equality Ombudsman (DO). IMY concludes that the DO did not take sufficiently effective security measures and issues an administrative fine of SEK 100,000.

Our website provides information on what you can do if you want to remove information on social media. Targeting on social media (in Swedish) If the post is offensive or harmful, it may be a crime of

If you carry out video-surveillance you need to provide information regarding the surveillance in an intelligible and easily accessible way. The General Data Protection Regulation (GDPR) lists a number of requirements of what this information needs to contain.

You can call IMY for guidance on general questions within the scope of our assignment. We cannot give you binding information or answers to questions in individual cases. Neither can we answer whether, for example, a particular personal data processing is lawful or whether a camera surveillance is carried out correctly.

According to the Credit Information Act, anyone requesting a credit report on an individual must have a legitimate need for the information. This means that the requester has entered into or be about

As a private citizen you might want to use video-surveillance on your property or close to your home or vehicle.

One of the purposes of the General Data Protection Regulation (GDPR) is to protect individuals' fundamental rights and freedoms, particularly their right to protection of their personal data.

Companies often have operations in several countries and personal data does not always stay in one country. An instance of personal data processing that has a connection to more than one member state of the EU is called cross-border processing.

When initiating a new research project, you need to know how personal data may be processed in the research. On this webpage, we’ve collected basic information on requirements and issues when processing personal data in research. Remember that the data controller is always responsible for how and why personal data is processed.

You can submit a whistleblower report to IMY if you have information that the organisation you currently work for, have previously worked for or have applied to work for, is violating the General Data Protection Regulation (GDPR) or supplementary national legislation like the Data Protection Act.