The Swedish Consumer Agency initiates audits against over 50 influencers and advertisers
The Swedish Consumer Agency (Sw. Konsumentverket) has announced that it has initiated audits against over 50 influencers and advertisers. According to the agency, many influencers fail to clearly label promotional content, thereby violating marketing laws and placing young audiences—who are particularly vulnerable to subtle advertising—at risk. Advertisers who engage these influencers are also under review. […]
Sanctions imposed on Apple and Meta for breaches of the Digital Markets Act
On 23 April 2025, the European Commission found that Apple has breached the anti-steering obligation under the Digital Markets Act (DMA), and that Meta, through its “Consent or Pay” advertising model, has breached the DMA requirement to offer consumers a choice of a service that uses less personal data. In the first penalties issued under […]
Proposal for implementation of Directive 2023/2673 into Swedish law
We have previously written about the Directive 2023/2673 concerning distance contracts concluded by means of an online interface – read the full article here: The right of withdrawal from distance contracts concluded by means of an online interface – EU Digital Compliance Tracker (Snellman). The Swedish government has now published a Swedish Government Official Report […]
EDPB Publishes Draft Guidelines on Blockchains
The European Data Protection Board (EDPB) has published its draft Guidelines 02/2025 on the processing of personal data through blockchain technologies. The guidelines aim to clarify how GDPR applies to blockchain-based data processing. The document is currently open for public consultation and may be subject to change before final adoption. Key excerpts from the draft […]
European Commission plans to launch AI Act support tools to simplify compliance with the AI Act
The European Commission has launched an AI Continent Action Plan to simplify compliance and help organisations navigating within the new AI Act. As part of this, the Commission is launching an AI Act Service Desk within the EU AI Office in July 2025. The Service Desk aims to serve as an information hub where stakeholders can […]
European Commission publishes living repository to highlight AI literacy efforts across organisations
The European Artificial Intelligence Office has launched a living repository showcasing how AI Pact organisations are promoting learning and knowledge-sharing around AI literacy, as required by Article 4 of the AI Act. The repository includes list of practices on how to educate staff and users on the responsible use of AI systems and will be […]
European Commission adopts Decision (EU) 2025/628 laying down internal rules for its data processing activities under the enforcement of the DSA
On 31 March 2025, the European Commission adopted a decision establishing internal rules relating to the Commission’s processing of personal data for purposes such as supervision, investigation, enforcement and monitoring under Regulation (EU) 2022/2065, known as the Digital Services Act (DSA). The decision applies to data subjects such as suspects, victims, whistleblowers, informants, witnesses, and […]
Swedish DPA Initiates Audits on Providers of Online Criminal Offence Databases Following Supreme Court Ruling
The Swedish Authority for Privacy Protection (IMY) has announced that it has initiated audits against Legal Newsdesk Sweden AB (Lexbase.se) and Fuplex AB (krimfup.se) – two Swedish companies with publication certificates that provide searchable databases with information on criminal offences. Following complaints to IMY about certain services that publish personal data, in particular about criminal […]
Swedish Ruling Clarifies the Applicability of Swedish Law in Cross-Border Marketing
The Swedish Patent and Market Court of Appeal recently issued a ruling regarding the possibility to intervene against marketing on a website operated by an EU-based company in Sweden. The case concerned a German company’s marketing of, i.e., cosmetic products. In particular, questions arose regarding i) unfair marketing claims on the company’s website, and ii) […]
Sanctions imposed on Telenor ASA
Datatilsynet has issued an order and imposed an administrative fine of 350,000 EUR on Telenor ASA for inadequate compliance with the GDPR’s requirements regarding data protection officers. The decision can be found here.