Tele2 Sverige Aktiebolag – €1,000,000 Fine (Sweden, 2023)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
IMY announced a SEK 12 million fine on Tele2 on 3 July 2023 for transfers of personal data to the United States through Google Analytics. The EUR amount shown remains an imported estimate; its historical exchange-rate basis has not been verified in this review. The same announcement covers other companies, whose cases remain separate.
What happened
Tele2 Sverige unlawfully transferred personal data to the US while using Google Analytics.
Who was affected
Users whose personal data was transferred to the US without adequate protection were affected.
What the authority found
The Swedish DPA found that Tele2 did not provide sufficient protection for personal data transferred to the US, violating GDPR.
Why this matters
This ruling reinforces the need for businesses to ensure that any data sent outside the EU meets strict protection standards. Companies should assess their data transfer agreements carefully.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check failed — 5 March 2026.
Processing notes: parse error.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Swedish DPA has imposed a fine of EUR 1 million on Tele2 Sverige Aktiebolag. The Austrian organization None of your Business (NOYB) had filed a complaint against the company in light of the Schrems II judgment, stating that the company was unlawfully transferring personal data to the US. The company had used Google Analytics for visitor statistics and based the data processing by the statistics tool on the EU standard contractual clauses, as no adequacy decision had been issued by the EU Commission for the USA. In the course of its investigation, the DPA determined that the use of the standard contractual clauses was not sufficient to guarantee a level of protection equivalent to that of the EU. ---UPDATE--- Following an appeal to the Administrative Court of Appeal, the court upheld the DPA's decision.
Related Enforcement Actions (0)
No other enforcement actions found for Tele2 Sverige Aktiebolag in SE
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
30 June 2023
Authority
Integritetsskyddsmyndigheten
Fine Amount
€1,000,000
12,000,000 SEK
Enforcement Tracker ID
ETid-1937
About this data
Cite as: Cookie Fines. Tele2 Sverige Aktiebolag - Sweden (2023). Retrieved from cookiefines.eu
Last updated: