Skip to content
News
EN

Sweden: Users are not party to their own privacy rights?

noyb - European Center for Digital Rights

Content

Forced Consent & Consent Bypass Sweden: Users are not party to their own privacy rights? The Swedish DPA (IMY) refuses to take a decision on a GDPR complaint, claiming that the user is not a party to his own rights. In essence, the IMY seems to take the view that the “right to a complaint” under Article 77 GDPR, which should give everyone free access to enforcement, is only a right to “petition” the authority. noyb filed an appeal today to the administrative court in Stockholm. One month under GDPR turns into three years in reality. Under the GDPR, everyone has a right to access their data, including a copy of all data and an explanation of the data usage. The legal deadline for responding to an access request is one month. In 2019, as part of a project on streaming companies, noyb also filed a complaint against Spotify over an incomplete response to an access request. The complaint, filed in Austria, was forwarded to the Swedish IMY, which is responsible for Spotify. Since then th