Sweden

AB Storstockholms Lokaltrafik

6,800 €

GDPR enforcement action by Data Protection Authority of Sweden (Integritetsskyddsmyndigheten) on 2025-06-18.

Rank · Sector

#132

of 185 in Transportation and Energy

Rank · Sweden

#45

of 47

Rank · All fines

#1,691

of 3,280

Case details

Authority: Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)
Date: 2025-06-18
Controller / Processor: AB Storstockholms Lokaltrafik
Sector: Transportation and Energy
Quoted Articles: Art. 6 GDPR, Art. 9 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Swedish DPA has imposed a fine of EUR 6,800 on AB Storstockholms Lokaltrafik. The controller, a public transportation company, requires employees operating a ferry to take a breathalyzer test before each departure. The results of the test are stored afterwards. The DPA found that there is no legal basis for this data processing.

Open original source Links to the regulator's original publication or another source.