Search results

The primary purpose of the Credit Information Act is to protect data subjects' personal privacy but the law is also to contribute to efficient provision of credit information.

The primary purpose of the Credit Information Act is to protect data subjects' personal privacy but the law is also to contribute to efficient provision of credit information.

A licence from the Swedish Authority for Privacy Protection is normally required to operate credit reference activities. We decide on licences to operate credit reference activities only if the activities can be assumed to be carried on in a knowledgeable and judicious manner. Our evaluation is based on the type and scope of the planned activities.

On this page you will find answers to the most frequently asked questions that IMY receives about payment default records.

The Swedish DPA has issued an administrative fine of 35 000 EUR against Mrkoll.se – a website that publishes personal data of all Swedes above the age of 16 – for infringement of the Credit Information Act and the GDPR. The website has carried out credit information activity in a way that is not in compliance with the law.

Here are all the forms that you, as a representative of an organisation, can use. Read our information carefully before filling in a form.

Our vision is a society where personal privacy is valued and respected.

The Swedish Authority for Privacy Protection (IMY) issues an administrative fine of SEK 7,500,000 against Klarna Bank AB after an investigation has shown that the company has not complied with several of the rules in the GDPR.

The Swedish government has designated the Swedish Authority for Privacy Protection to be the supervisory authority under the General Data Protection Regulation.

If you think that someone is processing your personal data incorrectly you can file a complaint to the Swedish Authority for Privacy Protection (IMY) using our e-service.