Swedish DPA Focuses on Innovation and Effective Complaint Management
The Swedish Data Protection Authority (IMY) continues to advance its commitment to supporting innovation, particularly in the field of Artificial Intelligence (AI), while also enhancing its complaint management and supervisory roles. In its annual report to the government, IMY highlights its ongoing efforts to provide guidance to innovation actors, aiming to foster sustainable and privacy-friendly innovation within society. The authority has conducted two significant projects through its regulatory sandbox: one on federated machine learning for healthcare AI, and another on the use of sensors as an alternative to camera surveillance to measure public safety.
In 2023, a year marked by a global focus on AI, IMY has significantly increased its oversight activities, initiating over 200 supervisory actions, a notable rise from 121 the previous year. The authority has also imposed sanctions totaling over €12 million, a substantial increase from the €1 million levied in 2022. This escalation in enforcement underscores IMY’s commitment to upholding data protection laws amidst a changing legal landscape, which now includes the right for individuals to appeal decisions made by IMY on their complaints, as established by the Supreme Administrative Court.
IMY’s priorities extend to contributing to legislative efforts in combating crime. Amidst a backdrop of organized crime and gun violence, the authority has actively participated in legislative work and served as a consulting body for numerous inquiries. IMY emphasizes the importance of a comprehensive analysis of how various legislative proposals affect the right to privacy and advocates for the creation of temporary laws that can be evaluated before becoming permanent.
For more information on IMY’s initiatives and focus areas, contact Carin Sundhage, Acting Chief of Staff, or the Press Service. The authority’s dedication to innovation and complaint handling, along with its increased supervisory role, signals a stronger enforcement of GDPR and data protection laws moving forward.
