Background & Purpose

The EU's data protection rules (GDPR) require each member state to have an authority that oversees how personal data is handled. In Sweden, this is the Swedish Authority for Privacy Protection (IMY). However, sometimes complaints about personal data processing are not handled or take too long, leaving individuals without answers.

Proposals & Debate

The Swedish government proposed new rules to prevent IMY from delaying or failing to process complaints about personal data. The main idea was to give individuals a new way to push for a decision. This means that if you've filed a complaint, you can now ask for an update after three months, and IMY must respond within two weeks.

The Decision

The Swedish Parliament approved the government's proposal, introducing new rules to ensure that individuals receive timely responses from IMY when they file complaints about personal data handling.

Does this affect you?

  • Individuals filing data privacy complaints: They gain a new right to demand a response from IMY within a set timeframe, improving their ability to get answers about their personal data.
  • Swedish Authority for Privacy Protection (IMY): They will have a clearer obligation to respond to individuals' requests for updates on complaints within a two-week period, ensuring more efficient handling.

In Practice

  • If you file a data privacy complaint with IMY, you can now ask for an update on its status after three months.
  • IMY must then respond within two weeks to your request for an update.
  • Their response will clearly state whether they plan to investigate your complaint or not.
  • If you are unhappy with IMY's decision, you will have the right to appeal it.