# AB Storstockholms Lokaltrafik: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)
- Date: 2025-06-18
- Original: https://www.enforcementtracker.com/ETid-2680
- Canonical: https://overview.legal/posts/48795
- Topics: Controllers, Processing Agreement, Processing, Supervisory Authorities, Data Controller

## Summary

The Swedish DPA has imposed a fine of EUR 6,800 on AB Storstockholms Lokaltrafik. The controller, a public transportation company, requires employees operating a ferry to take a breathalyzer test before each departure. The results of the test are stored afterwards. The DPA found that there is no legal basis for this data processing.

## Full text

The Swedish DPA has imposed a fine of EUR 6,800 on AB Storstockholms Lokaltrafik. The controller, a public transportation company, requires employees operating a ferry to take a breathalyzer test before each departure. The results of the test are stored afterwards. The DPA found that there is no legal basis for this data processing.

GDPR Articles: Art. 6 GDPR, Art. 9 GDPR
Industry: Transportation and Energy

---
Generated by overview.legal · https://overview.legal/posts/48795 · 2026-08-22