Search results

The Swedish Privacy Protection Authority (IMY) has done a supervision of a personal data incident at the Equality Ombudsman (DO). IMY concludes that the DO did not take sufficiently effective security measures and issues an administrative fine of SEK 100,000.

Swedish Authority for Privacy Protection has issued an administrative fine of SEK 300,000 against a housing company for unlawful video surveillance in an apartment building.

Swedish Authority for Privacy Protection issues an administrative fine of SEK 200,000 against Gnosjö Municipality for unlawful video surveillance in an LSS housing.

It is common that individuals of the general public use video-surveillance on their own property. The so-called "domestic purpose exemption" means that the rules of GDPR do not apply when using video-surveillance in your capacity as a private citizen or in connection to your personal household. Sometimes it is hard to know when the exemption applies. Following you will find a guide on what applies when it comes to video-surveillance and the domestic purpose exemption.

Swedish Authority for Privacy Protection (DPA) has investigated a co-operative housing association’s use of video surveillance on its property. The DPA concludes that the association has gone too far when using video surveillance in the main entrance and the stairwell and when recording audio.

In January 2025, the Swedish Agency for Digital Government (Digg) together with the Swedish Authority for Privacy Protection (IMY) launched guidelines to encourage the use of generative AI in public administration. The purpose of the guidelines is to enhance the ability to use generative AI in a safe, ethical and efficient way.

The Swedish Authority for Privacy Protection (IMY) has decided to impose administrative fines of SEK 37 million on Apoteket AB and SEK 8 million on Apohem AB. This comes after the companies used the so-called Meta Pixel on their websites and transferred sensitive personal data to Meta.

The Swedish Authority for Privacy Protection (IMY) has fined Aktiebolaget Storstockholms Lokaltrafik (SL) and Waxholms Ångfartygs AB (WÅAB) for processing personal data relating to sobriety tests conducted by employees in breach fo the GDPR. IMY issues an administrative fine of SEK 75, 000 against each companies.

The Swedish Data Protection Authority (IMY) criticizes the Hospital Board in Region Uppsala, for not having taken sufficient security measures in connection with the processing of personal data about, among other things, health, in e-mail.

You can call IMY for guidance on general questions within the scope of our assignment. We cannot give you binding information or answers to questions in individual cases. Neither can we answer whether, for example, a particular personal data processing is lawful or whether a camera surveillance is carried out correctly.