Sweden: Authority for Privacy Protection investigation into Spotify's compliance with individuals' requests to access their personal data

Progress

Current status
in force
03 Jun 2025 in force
13 Jun 2023 in force
11 Jun 2019 under deliberation

Scope

Implementers
Sweden
Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
streaming service provider
Government Branch
executive
Government Body
data protection authority
Implementation Level
national

Timeline of events

03 Jun 2025
in force

Administrative Court of Appeal upheld the SEK 58 million fine imposed on Spotify AB for noncompliance with GDPR provisions on data subjects' rights

On 3 June 2025, the Administrative Court of Appeal upheld the SEK 58 million fine imposed on Spotify AB for noncompliance with the General Data Protection Regulation (GDPR). The penalty was originally issued by the Swedish Authority for Privacy Prot…

Source
Event type investigation
Action type ruling
Government branch executive
Government body data protection authority
13 Jun 2023
in force

Authority for Privacy Protection fined Spotify SEK 58 million for non-compliance with individuals' requests to access their personal data

On 13 June 2023, the Authority for Privacy Protection (APP) of Sweden issued its ruling in the investigation into Spotify's compliance with individuals' requests to access their personal data and imposed a SEK 58 million penalty. The APP noted that …

Source
Event type investigation
Action type ruling
Government branch executive
Government body data protection authority
11 Jun 2019
under deliberation

Announced Authority for Privacy Protection investigation into Spotify's compliance with individuals' requests to access their personal data

On 11 June 2019, the Authority for Privacy Protection (APP) of Sweden opened an investigation into Spotify's compliance with individuals' requests to access their personal data following a complaint submitted alleging non-compliance with General Dat…

Source
Event type investigation
Action type announcement
Government branch executive
Government body data protection authority