Enforcement · Data Protection Authority of Sweden EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Klarna Bank AB: Insufficient fulfilment of information obligations

€720,000 Fine
Klarna Bank AB
SWEDEN
Art. 5 GDPR Art. 12 GDPR Art. 13 GDPR Art. 14 GDPR
Processing Agreement Personal Data IP Address Insurance Processing International Transfer Supervisory Authorities Law Enforcement
Mar 28, 2022 Source

How it connects

Related across sources

News Danish SA Declares Use of Google Analytics Unlawful Without Supplementary Measures Datatilsynet News UK data protection reform: How the UK's GDPR may change Hogan Lovells Guidance Guidelines 07/2020 on the concepts of controller and processor in the GDPR EDPB Guidance Guidelines 4/2019 on Article 25 Data Protection by Design and by Default Version 2.0 Adopted on 20 October 2020 EDPB Literature GDPR Implementation Series ∙ Hungary: Introduction to the GDPR Application and a Brief History of Data Protection European Data Protection Law Review Literature GDPR Implementation Series ∙ Spain: Preparations for a New Law on Data Protection to Implement the GDPR European Data Protection Law Review

Full text

The Swedish DPA has imposed a fine of EUR 720,000 on Klarna Bank AB. Klarna is a financial company that processes a large number of personal data in various ways. As part of its investigation, the DPA found that Klarna had not properly complied with its information obligations. For example, Klarna did not provide sufficient information on its website about the purpose and legal basis for the processing of personal data. In addition, with regard to the transfer of data to Swedish and foreign credit agencies, Klarna provided incomplete information about the recipients of the personal data. Klarna also failed to provide information about third countries where personal data is transferred to. Finally, the DPA found that Klarna insufficiently informed data subjects about their rights under the GDPR.

Industry: Finance, Insurance and Consulting

Original document at the source www.imy.se

Similar Content