Search results

The Swedish Privacy Protection Authority (IMY) has done a supervision of a personal data incident at the Equality Ombudsman (DO). IMY concludes that the DO did not take sufficiently effective security measures and issues an administrative fine of SEK 100,000.

The Swedish Authority for Privacy Protection (IMY) has supervised the company Sportadmin following an IT attack in which a large volume of personal data was leaked. The review shows that Sportadmin did not have an appropriate level of security to protect the personal data the company processed. IMY therefore decides to impose an administrative fine of SEK 6 million.

Swedish Authority for Privacy Protection (DPA) has investigated a co-operative housing association’s use of video surveillance on its property. The DPA concludes that the association has gone too far when using video surveillance in the main entrance and the stairwell and when recording audio.

Glasses with built-in cameras and other technology – known as smart glasses – are becoming increasingly difficult to distinguish from ordinary glasses, and the technology is becoming ever more advanced.

In January 2025, the Swedish Agency for Digital Government (Digg) together with the Swedish Authority for Privacy Protection (IMY) launched guidelines to encourage the use of generative AI in public administration. The purpose of the guidelines is to enhance the ability to use generative AI in a safe, ethical and efficient way.

Trygg-Hansa's security flaws have meant that information about 650,000 customers has been accessible to unauthorized persons via the internet. The Swedish Authority for Privacy Protection (IMY) is now issuing an administrative fine of SEK 35 million against the company.

Swedish Authority for Privacy Protection (IMY) has about 160 employees, most of whom are lawyers. Our organisation reflects our areas of operations and the way we work.

The Schengen Information System is a system used by Schengen Member States to exchange information within the framework of police cooperation, judicial cooperation in criminal matters and migration.

When initiating a new research project, you need to know how personal data may be processed in the research. On this webpage, we’ve collected basic information on requirements and issues when processing personal data in research. Remember that the data controller is always responsible for how and why personal data is processed.

You can call IMY for guidance on general questions within the scope of our assignment. We cannot give you binding information or answers to questions in individual cases. Neither can we answer whether, for example, a particular personal data processing is lawful or whether a camera surveillance is carried out correctly.