Decision from IMY after inspection of Apotea AB (publ)
Swedish Authority for Privacy Protection (Sw. Integritetsskyddsmyndigheten,“IMY”) has concluded its investigation into Apotea AB (publ)’s (“Apotea”) processing of personal data and compliance with GDPR. This following a self-notification of a personal data breach submitted by Apotea. In the investigation of two other pharmacy players, who also made a self-notification, IMY decided to issue administrative fines.Today, IMY announced a decision after the supervision of Apotea. IMY states that "in a combined assessment, IMY finds that it is a matter of a minor violation" of article 32.1 in the