AB Storstockholms Lokaltrafik
€6,800
Insufficient legal basis for data processing
Decision Date
June 18, 2025
Authority
Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)
SE
Sector
Transportation and Energy
Country
SE
Law
GDPRStatus
FINALDescription
The Swedish DPA has imposed a fine of EUR 6,800 on AB Storstockholms Lokaltrafik. The controller, a public transportation company, requires employees operating a ferry to take a breathalyzer test before each departure. The results of the test are stored afterwards. The DPA found that there is no legal basis for this data processing.
Legal Citations
Art. 6Art. 9
Issues & Violations
Insufficient legal basis for data processing