Swedish IMY, formerly Datainspektionen, fines the Swedish Police Authority administrative sanction fee of €250 000 for violations of the Criminal Data Act. For the Swedish public sector, the maximum fine is €1M, so this constitutes as [...]
11 February 2021 at 14:00-15:00 Many authorities and companies have in the suites of the GDPR got their structured data in order, but the rules also apply to unstructured data that contains personal data. The [...]
The IT Operations Inquiry (IT-driftsutredningen) recently presented its report on “Secure and cost-effective IT operations” with a special focus on the legal conditions for public sector outsourcing. The conclusion is that an amendment to the [...]
Umeå University receives a fine of €55 000, announces the Swedish DPA Datainspektionen. A group of researchers at the university have scanned public criminal investigation protocols as PDFs and saved them in a US cloud [...]
The Swedish DPA, Datainspektionen, announces that it has completed its review of eight care providers' medical record systems. During their supervision, they have found major shortcomings in the access management and also in functions for [...]
The Swedish DPA, Datainspektionen, issues a fine of SEK 4 million to the Board of Education in the city of Stockholm. The fine applies to the city's school platform, which on examination of the system [...]
Swedish insurance group Folksam reports that they voluntarily, but illegally, have shared personal data concerning more than 1 million data subjects with American companies such as Facebook, Google, Microsoft, Linkedin and Adobe. The illegal data transfers where [...]
Swedish world-renowned retailer H&M reveals a €35M fine in their quarterly report. The fine has been issued by the data protection authority in Hamburg following a personal data incident in the company’s service center. It [...]
Nordic Privacy Arena, NPA, is the biggest gathering of privacy and security professionals in the Nordics. More than 700 professionals meet under two days and share insights and experiences. This year, although being digital, the [...]
The Swedish DPA Datainspektionen has now presented their first embryo of guidelines following the Shrems II case from July 16th. They conclude, as many others, that transfer of personal data from the EU to the [...]
