Storstockholms Lokaltrafik – €1,600,000 Fine (Sweden, 2021)

€1,600,000Integritetsskyddsmyndigheten21 June 2021Sweden
reduced
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Sweden fined Storstockholms Lokaltrafik €1.6 million for using body cameras on ticket inspectors without proper privacy measures. The cameras recorded passengers' audio and video all day, which was seen as excessive. This case shows the need for careful use of surveillance technology in public spaces.

What happened

Storstockholms Lokaltrafik used body cameras on ticket inspectors, recording passengers without adequate privacy safeguards.

Who was affected

Passengers using Stockholm's public transportation who were recorded by ticket inspectors' body cameras.

What the authority found

The authority ruled that the use of body cameras violated privacy principles due to excessive recording and lack of transparency.

Why this matters

This ruling highlights the importance of balancing security measures with privacy rights. Public transport operators should ensure surveillance tools are used minimally and transparently.

GDPR Articles Cited

AI-verified

Art. 13 GDPR
Art. 5(1)(a) GDPR
Art. 6(1)(f) GDPR
View original scraped data
Art. 5(1)(a) GDPR
c) GDPR
Art. 6(1)(f) GDPR
Art. 13 GDPR

Original data from scraper before AI verification against source document.

Source verified 5 March 2026
verified correct
Full Legal Summary
Detailed

The Swedish DPA has fined Storstockholms Lokaltrafik (Stockholm Local Transport Company) EUR 1,600,000. The controller had equipped ticket inspectors with body-worn cameras, which were designed to prevent threatening situations, document incidents, and ensure that the right person was fined for traveling on Stockholm's public transportation without a valid ticket. Ticket inspectors were required to keep the camera on for their entire shift and were therefore able to film all passengers who passed the inspector. Since several hundred thousand people use public transportation in Stockholm every day, a large number of people were thus at risk of being monitored by video and audio recordings. The DPA believes that body-worn camera technology could be used to prevent and document threatening situations, but that the pre-recording time should be reduced to a maximum of 15 seconds, as a longer pre-recording time is not necessary to achieve the above-mentioned purposes. Furthermore the DPA found that audio recordings did not contribute to the identification of persons without a valid ticket. The DPA therefore considered the audio recordings to be a violation of the principles of legality and transparency as well as data minimization. The DPA also criticized the controller for not providing sufficient information about the camera surveillance, including the fact that not only images but also sounds were recorded.

Related Enforcement Actions (0)

No other enforcement actions found for Storstockholms Lokaltrafik in SE

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

21 June 2021

Authority

Integritetsskyddsmyndigheten

Fine Amount

€1,600,000

Enforcement Tracker ID

ETid-733

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Storstockholms Lokaltrafik - Sweden (2021). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: