Swedish Authority for Privacy Protection (IMY) is a public authority. Our task is to protect the individual's privacy in the information society. IMY works to prevent encroachment upon privacy through information and by issuing directives and codes of statutes. We also handle complaints and carry out inspections. By examining government bills, IMY ensures that new laws and ordinances protect personal data in an adequate manner.
News
300,000 SEK fine against housing company
2020-12-15
Swedish Authority for Privacy Protection has issued an administrative fine of SEK 300,000 against a housing company for unlawful video surveillance in an apartment building.
Press release: 300,000 SEK fine against housing company
University failed to sufficiently protect sensitive personal data
2020-12-11
Umeå University has processed special categories of personal data concerning sexual life and health through, amongst other, storage in a cloud service, without sufficiently protecting the data. Swedish Authority for Privacy Protection is therefore issuing a fine of SEK 550,000 against the university.
Press release: University failed to sufficiently protect sensitive personal data
Deficiencies in how healthcare providers control staff access to patient journal data
2020-12-03
Swedish Authority for Privacy Protection has audited eight health care providers in how they govern and restrict personnel’s access to the main systems for electronic health records. The DPA has discovered insufficiencies that in seven of the eight cases lead to administrative fines of up to SEK 30 million.
Press release: Deficiencies in how healthcare providers control staff access to patient journal data
GDPR fine for unlawful video surveillance in an LSS housing
2020-11-25
Swedish Authority for Privacy Protection issues an administrative fine of SEK 200,000 against Gnosjö Municipality for unlawful video surveillance in an LSS housing.
Press release: GDPR fine for unlawful video surveillance in an LSS housing
Serious deficiencies in the Stockholm online School Platform
2020-11-24
Swedish Authority for Privacy Protection has reviewed the so-called School Platform, the IT system used for, among other things, student administration of schools in the City of Stockholm. The review shows an insufficient level of security of such grave nature that the authority issues an administrative fine of four million SEK against the Board of Education in the City of Stockholm.
Press release: Serious deficiencies in the Stockholm online School Platform