The Stockholm administrative court held that a complainant under Article 77 GDPR can request a decision from the Swedish Data Protection Authority (IMY) after six months and that Swedish law does not deny party status. The court ordered the IMY to process and investigate the complaint against Spotify, extending the right to all users in Sweden.
Why it matters: The ruling clarifies that Swedish data subjects can enforce their GDPR rights by being recognized as parties in DPA investigations.
Summary generated from the sources below. Check the primary source before relying on it; this is not legal advice.