The Swedish Authority for Privacy Protection's (IMY) role is to uphold the protection of personal data, monitoring that they are handled correctly and do not fall into the wrong hands.
Welcome to IMY!
The Swedish Authority for Privacy Protection's (IMY) role is to uphold the protection of personal data, monitoring that they are handled correctly and do not fall into the wrong hands.
What do you need today?
News
-
Administrative fine against Sportadmin
28 January 2026
The Swedish Authority for Privacy Protection (IMY) has supervised the company Sportadmin following an IT attack in which a large volume of personal data was leaked. The review shows that Sportadmin did not have an appropriate level of security to protect the personal data the company processed. IMY therefore decides to impose an administrative fine of SEK 6 million.
-
National guidelines for generative AI in public administration are launched
24 July 2025
In January 2025, the Swedish Agency for Digital Government (Digg) together with the Swedish Authority for Privacy Protection (IMY) launched guidelines to encourage the use of generative AI in public administration. The purpose of the guidelines is to enhance the ability to use generative AI in a safe, ethical and efficient way.
-
Administrative fines against two companies in the SL Group
03 July 2025
The Swedish Authority for Privacy Protection (IMY) has fined Aktiebolaget Storstockholms Lokaltrafik (SL) and Waxholms Ångfartygs AB (WÅAB) for processing personal data relating to sobriety tests conducted by employees in breach fo the GDPR. IMY issues an administrative fine of SEK 75, 000 against each companies.