Regulatory Watch  /  Sweden  /  Enforcement
Low impactEnforcementFiled

Swedbank denies data subject access to mortgage rate logic, noyb files complaint with Swedish DPA

Swedbank rejected a Swedish citizen's request for information on how its automated mortgage interest rate is calculated, citing a trade‑secret claim. The refusal appears to breach Article 15(1)(h) of the GDPR, which requires meaningful information about the logic of automated decisions. Noyb has filed a complaint with the Swedish Data Protection Authority (IMY) seeking an investigation and possible fine.

Why it matters: The case highlights enforcement of GDPR transparency obligations for automated banking decisions.

Summary generated from the sources below. Check the primary source before relying on it; this is not legal advice.

Sources
Swedbank refuses transparency in automatic interest calculation
noyb · primary source · Feb 27, 2025
Swedbank refuses transparency in automatic interest calculation
noyb · Feb 27, 2025
Details
JurisdictionSweden
RegulatorSwedish Data Protection Authority (IMY)
LawGeneral Data Protection Regulation
StatusFiled
PublishedFebruary 27, 2025
Effectivenot stated
OrganisationsSwedbank
Topicstransparency, automated decision making, access, privacy
Datapersonal