Enforcement action · IMY (Swedish DPA)

Administrative fines against Apoteket and Apohem for transferring personal data to Meta

Administrative fines against Apoteket and Apohem for transferring personal data to Meta is an AI-related enforcement action involving IMY (Swedish DPA). Penalty: monetary_fine of $SEK 37 million; SEK 8 million. The Swedish DPA (IMY) imposed administrative fines of SEK 37 million on Apoteket AB and SEK 8 million on Apohem AB for using Meta Pixel and transferring sensitive personal data to Meta without a valid legal basis.

Action details

Agency
IMY (Swedish DPA)
Jurisdiction
SE
Enforcement type
fine
Document type
enforcement action
Penalty
$SEK 37 million; SEK 8 million monetary_fine
Topic
ai privacy

Summary

The Swedish Authority for Privacy Protection (IMY) has levied significant administrative fines against Apoteket AB and Apohem AB, totaling SEK 45 million. The enforcement action stems from the companies' use of Meta Pixel on their websites, which resulted in the transfer of sensitive personal data to Meta without adequate legal grounds. This highlights the ongoing regulatory scrutiny of data transfers via third-party tracking tools, especially concerning sensitive data.

Primary source

https://www.imy.se/en/news/administrative-fines-against-apoteket-and-apohem-for-transferring-personal-data-to-meta/ →

Related IMY (Swedish DPA) actions

Frequently asked questions

What is Administrative fines against Apoteket and Apohem for transferring personal data to Meta?
The Swedish Authority for Privacy Protection (IMY) has levied significant administrative fines against Apoteket AB and Apohem AB, totaling SEK 45 million. The enforcement action stems from the companies' use of Meta Pixel on their websites, which resulted in the transfer of sensitive personal data to Meta without adequate legal grounds. This highlights the ongoing regulatory scrutiny of data transfers via third-party tracking tools, especially concerning sensitive data. Primary source →
Which agency brought the action?
IMY (Swedish DPA) brought this enforcement action in SE. Primary source →
What was the penalty?
The disclosed penalty is a monetary_fine amount of $SEK 37 million; SEK 8 million. Primary source →
When did the action take effect?
The most recent activity on this action was published on 7/3/2025. Primary source →
Where can I find the primary source?
The primary source for Administrative fines against Apoteket and Apohem for transferring personal data to Meta is at https://www.imy.se/en/news/administrative-fines-against-apoteket-and-apohem-for-transferring-personal-data-to-meta/. AIGI does not paraphrase secondary commentary — every claim on this page links back to that primary source. Primary source →

Related

Stay informed

Get every IMY (Swedish DPA) AI enforcement update.

Start 14-day trial →