Search results

The Swedish Privacy Protection Authority (IMY) has done a supervision of a personal data incident at the Equality Ombudsman (DO). IMY concludes that the DO did not take sufficiently effective security measures and issues an administrative fine of SEK 100,000.

The General Data Protection Regulation applies to the processing of personal data. Personal data is any information that refers to an identified or identifiable natural person.

No, you do not need to notify all personal data breaches to IMY. If the breach is unlikely to result in a risk to the rights and freedoms of natural persons, it does not need to be reported to us. Eve

Here you can read more about, and notify personal data breaches, according to the Criminal Data Act.

Personal data is any kind of information that can be linked to a living person.

A personal data breach is a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.

Trygg-Hansa's security flaws have meant that information about 650,000 customers has been accessible to unauthorized persons via the internet. The Swedish Authority for Privacy Protection (IMY) is now issuing an administrative fine of SEK 35 million against the company.

On this page you will find answers to the most frequently asked questions that IMY receives about payment default records.

When initiating a new research project, you need to know how personal data may be processed in the research. On this webpage, we’ve collected basic information on requirements and issues when processing personal data in research. Remember that the data controller is always responsible for how and why personal data is processed.

In January 2025, the Swedish Agency for Digital Government (Digg) together with the Swedish Authority for Privacy Protection (IMY) launched guidelines to encourage the use of generative AI in public administration. The purpose of the guidelines is to enhance the ability to use generative AI in a safe, ethical and efficient way.