C077 Nusvar AB

National Administrative Procedures and DPA inactivity
Filing DPA
Controller
Nusvar AB
Case status
Pending (6 - 12 months)
Filed: (8 months 3 weeks ago)

In Sweden, anyone can get a media license and get exempt from the GDPR. While Article 85 of the GDPR allows member states to limit the application of some elements of the GDPR in the area of journalism (to e.g. protect sources or undercover investigations), Sweden took a brute force approach to this exception. Swedish national legislation makes it extremely easy to obtain a “media licence”, even if a company's activities are not even remotely related to those of a news outlet and clearly just focused on sharing and selling personal data. Even data brokers, meaning privately operated companies that buy and sell the personal data of millions of people without their knowledge, can use this loophole to exempt themselves from any obligations under the GDPR. This deprives the people of their fundamental right to privacy and exposes their most intimate data to the internet.

Protocol
Data Podsumowanie
06.11.2024
IMY rejects urgency procedure initiates investigation
11.03.2024
IMY confirms receipt of complaint