Tele2 Sverige Aktiebolag

€1,000,000

Insufficient technical and organisational measures to ensure information security

Fecha de la decisión

30 de junio de 2023

Autoridad

Data Protection Authority of Sweden

SE

Sector

Media, Telecoms and Broadcasting

País

SE

Ley

GDPR

Estado

FINAL

Descripción

The Swedish DPA has imposed a fine of EUR 1 million on Tele2 Sverige Aktiebolag. The Austrian organization None of your Business (NOYB) had filed a complaint against the company in light of the Schrems II judgment, stating that the company was unlawfully transferring personal data to the US. The company had used Google Analytics for visitor statistics and based the data processing by the statistics tool on the EU standard contractual clauses, as no adequacy decision had been issued by the EU Commission for the USA. In the course of its investigation, the DPA determined that the use of the standard contractual clauses was not sufficient to guarantee a level of protection equivalent to that of the EU.

Citas legales

Art. 44

Problemas e infracciones

Insufficient technical and organisational measures to ensure information security

Manténgase al día sobre la aplicación de las normas de protección de la intimidad

Respetamos su intimidad. Un correo electrónico al mes, sin spam, darse de baja en cualquier momento.