Regulatory Watch  /  Sweden  /  Court ruling
Low impactCourt rulingDecided

Swedish court rules IMY must investigate GDPR complaints and grant complainants party status

The Stockholm administrative court held that a complainant under Article 77 GDPR can request a decision from the Swedish Data Protection Authority (IMY) after six months and that Swedish law does not deny party status. The court ordered the IMY to process and investigate the complaint against Spotify, extending the right to all users in Sweden.

Why it matters: The ruling clarifies that Swedish data subjects can enforce their GDPR rights by being recognized as parties in DPA investigations.

Summary generated from the sources below. Check the primary source before relying on it; this is not legal advice.

Sources
GDPR Rights in Sweden: Court confirms that authority must investigate complaints.
noyb · primary source · Nov 9, 2022
GDPR Rights in Sweden: Court confirms that authority must investigate complaints.
noyb · Nov 9, 2022
Details
JurisdictionSweden
RegulatorSwedish Data Protection Authority (IMY)
CourtStockholm administrative court
LawGeneral Data Protection Regulation
StatusDecided
PublishedNovember 9, 2022
Effectivenot stated
OrganisationsSwedish Data Protection Authority (IMY), Spotify
Topicsaccess, privacy, transparency
Datapersonal