Swedish IMY, formerly Datainspektionen, fines the Swedish Police Authority administrative sanction fee of €250 000 for violations of the Criminal Data Act. For the Swedish public sector, the maximum fine is €1M, so this constitutes as [...]
The IT Operations Inquiry (IT-driftsutredningen) recently presented its report on “Secure and cost-effective IT operations” with a special focus on the legal conditions for public sector outsourcing. The conclusion is that an amendment to the [...]
Umeå University receives a fine of €55 000, announces the Swedish DPA Datainspektionen. A group of researchers at the university have scanned public criminal investigation protocols as PDFs and saved them in a US cloud [...]
The Swedish DPA, Datainspektionen, announces that it has completed its review of eight care providers' medical record systems. During their supervision, they have found major shortcomings in the access management and also in functions for [...]
The Swedish DPA, Datainspektionen, issues a fine of SEK 4 million to the Board of Education in the city of Stockholm. The fine applies to the city's school platform, which on examination of the system [...]
Swedish insurance group Folksam reports that they voluntarily, but illegally, have shared personal data concerning more than 1 million data subjects with American companies such as Facebook, Google, Microsoft, Linkedin and Adobe. The illegal data transfers where [...]
Swedish world-renowned retailer H&M reveals a €35M fine in their quarterly report. The fine has been issued by the data protection authority in Hamburg following a personal data incident in the company’s service center. It [...]
The Swedish DPA Datainspektionen has now presented their first embryo of guidelines following the Shrems II case from July 16th. They conclude, as many others, that transfer of personal data from the EU to the [...]
As most have noticed, the decision communicated by the European Court of Justice, CJEU, the 16th of July in the Schrems II case has made the usage of American cloud services, if not impossible, [...]
Privacy shield has fallen. This changes everything.The European Court of Justice, ECJ, has decided in the Schrems II-case (C-311/18). They declare the Privacy Shield, an arrangement created by the by the U.S. Department of Commerce [...]
