Sweden

Waxholms Ångfartygs AB

6,800 €

GDPR enforcement action by Data Protection Authority of Sweden (Integritetsskyddsmyndigheten) on 2025-06-18.

Rank · Sector

#121

of 167 in Transportation and Energy

Rank · Sweden

#45

of 46

Rank · All fines

#1,577

of 3,050

Case details

Authority: Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)
Date: 2025-06-18
Controller / Processor: Waxholms Ångfartygs AB
Sector: Transportation and Energy
Quoted Articles: Art. 6 GDPR, Art. 9 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Swedish DPA has imposed a fine of EUR 6,800 on Waxholms Ångfartygs AB. The controller, a public transportation company, requires employees operating a ferry to take a breathalyzer test before each departure. The results of the test are stored afterwards. The DPA found that there is no legal basis for this data processing.

Open original source Links to the regulator's original publication or another source.