- Enforcing jurisdiction
- Sweden · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Verifiera AB – Court Ruling (Sweden, 2024)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Verifiera AB received a reprimand for publishing health-related court decisions, which violated GDPR. The Swedish DPA ordered the company to comply with data protection laws. This case emphasizes the need for careful handling of sensitive health data.
What happened
Verifiera AB published court decisions containing health-related information.
Who was affected
Individuals whose health information was included in the published court decisions.
What the authority found
The DPA found that Verifiera's publication of health data breached GDPR regulations.
Why this matters
This case highlights the challenges of balancing freedom of expression with data protection laws, especially regarding sensitive health information.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 18 March 2026.
Processing notes: national law identified, authority corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The controller, Verifiera AB, operates a database that includes court decisions pertaining to involuntary psychiatric care and care of persons with substance abuse. The controller's business operations falls within the scope of the Swedish constitutional law on Freedom of Expression (Yttrandefrihetsgrundlag - YGL) due to their publishing license ("utgivningsbevis"). The Swedish DPA (Integritetsskyddsmyndigheten - IMY) issued a reprimand and an injunction against the controller. The DPA found that the publication of health-related court decisions by the controller violated Article 9(1) GDPR, which prohibits the processing of personal data related to health. It ordered the controller to take certain measures to comply with Article 9(1) GDPR. Although [https://www.riksdagen.se/sv/dokument-och-lagar/dokument/svensk-forfattningssamling/lag-2018218-med-kompletterande-bestammelser_sfs-2018-218/ Chapter 1, §7 of the Swedish Data Protection Act], states that the GDPR and the implementing national law shall not apply to the extent that this would conflict, among others, with the constitutional law on Freedom of Expression, the GDPR is still applicable when sensitive data is published under [https://www.riksdagen.se/sv/dokument-och-lagar/dokument/svensk-forfattningssamling/yttrandefrihetsgrundlag-19911469_sfs-1991-1469/#K1 Chapter 1, §20 YGL]. [https://www.riksdagen.se/sv/dokument-och-lagar/dokument/svensk-forfattningssamling/yttrandefrihetsgrundlag-19911469_sfs-1991-1469/#K1 Chapter 1, §20 YGL] states: “The provisions of this Constitution shall not preclude the enactment of legislation prohibiting the disclosure of personal data # revealing ethnic origin, skin colour or other similar characteristics, political opinions, religious or philosophical beliefs or trade union membership # concerning health, sex life or sexual orientation, or # which consists of genetic data or biometric data to uniquely identify a natural person.” Thus, the DPA held that Article 9(1) GDPR is ap
Outcome
Court Ruling
A ruling by a national court on a data-protection matter.
Related Cases (0)
No other cases found for Verifiera AB in SE
This is the only recorded case for this entity in this jurisdiction.
Details
Ruling Date
20 June 2024
Authority
DPA KamRStockholm
About this data
Cite as: Cookie Fines. Verifiera AB - Sweden (2024). Retrieved from cookiefines.eu
Last updated: