Sweden

Bonnier News AB

1,100,000 €

GDPR enforcement action by Data Protection Authority of Sweden on 2023-06-26.

Rank · Sector

#47

of 369 in Media, Telecoms and Broadcasting

Rank · Sweden

#11

of 46

Rank · All fines

#162

of 3,050

Case details

Authority: Data Protection Authority of Sweden
Date: 2023-06-26
Controller / Processor: Bonnier News AB
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 6 (1) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Swedish DPA has imposed a fine of EUR 1.1 million on Bonnier News AB. During its investigation, the DPA found that Bonnier News collects customer data, for example, through their surfing behavior or through purchases from different subsidiaries. However, the DPA also found that Bonnier News had collected and processed this data without the consent of the data subjects. Bonnier News relied on an predominant interest as a legal basis, but the DPA noted that customers could not expect their data to be collected for marketing purposes just because they visit a website, for example. For this reason, the DPA clarified that such extensive profiling would require the consent of the data subjects. In assessing the fine, mitigating consideration was given to the fact that Bonnier News had taken comprehensive measures to limit the harm to data subjects.

Open original source Links to the regulator's original publication or another source.