Sweden

AB Storstockholms Lokaltrafik

6,800 €

GDPR enforcement action by Data Protection Authority of Sweden (Integritetsskyddsmyndigheten) on 2025-06-18.

Rank · Sector

#118

of 165 in Transportation and Energy

Rank · Sweden

#44

of 46

Rank · All fines

#1,568

of 3,042

Case details

Authority: Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)
Date: 2025-06-18
Controller / Processor: AB Storstockholms Lokaltrafik
Sector: Transportation and Energy
Quoted Articles: Art. 6 GDPR, Art. 9 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Swedish DPA has imposed a fine of EUR 6,800 on AB Storstockholms Lokaltrafik. The controller, a public transportation company, requires employees operating a ferry to take a breathalyzer test before each departure. The results of the test are stored afterwards. The DPA found that there is no legal basis for this data processing.

Open original source Links to the regulator's original publication or another source.