Sweden: IMY releases 2023 supervisory plan
The Swedish Authority for Privacy Protection ('IMY') released, on 15 May 2023, its 2023 supervisory plan. In particular, the IMY highlighted that it will conduct complaint and risk-based reviews, in addition to carrying out inspections of, among other things, camera surveillance in public places and the role and position of data protection officers ('DPOs'). On the risk-based review, the IMY clarified that at least two of the following must be met before initiating such reviews:
- serious infringement, or the risk of serious infringement, on an individual's right to privacy;
- processing that affects, or is likely to affect, many individuals;
- new technology or the use of new technology that may significantly affect an individual's right to privacy;
- an essential need for guiding practice; and
- serious breaches of good practice in debt collection or unauthorised debt collection or credit information activities.
Furthermore, the IMY noted that during 2023, it will review its supervisory policy and plan for the next supervisory plan which will apply to 2024 to 2025.