C029-9 Coop Sverige AB

Data Transfers
Case project
Filing DPA
Coop Sverige AB
Case status
Other Outcome
Filed: (3 years 11 months ago)

This is one of noyb 101 complaints which were filed after the "Schrems II" judgement in Summer 2020. The judgement invalidated the EU-US data transfer mechanism "Privacy Shield". The cases were generated based on implemented Google Analytics or Facebook tracking code on websites by EU providers, which leads to unlawful data transfers to the United States.

Date Summary
IMY issues decision against controller

Ban of Google Analytics but no fine imposed. We have not been served with the decision as the IMY does not treat data subjects as parties but it was published here: https://www.imy.se/en/news/companies-must-stop-using-google-analytics/

Swedish DPA tells us that the data subject is not a party to the case and the case has been closed

"That case is closed (DI-2020-11376 noyb case number C029-9). It is a local case and in Sweden the complainant is not a party in Sweden, which means that Noyb does not need to be served according to 60 (3)."

noyb sent an email to IMY and requested for an update
noyb called the IMY

Very rough estimate was six weeks for the decisions to be done.

noyb asked the DSB for an update
noyb filed our reply with the DSB
DSB sent us the controllers reply

DSB sent us the controller's reply and set a 2 week deadline to reply.

Swedish DPA issued a press statement that they are initiating investigations into the complaints
DSB notified us that the procedure is stayed until establishment of LSA