Which agency brought the action?

IMY (Swedish DPA) brought this enforcement action in SE.

What was the penalty?

No specific penalty amount is disclosed in the primary source AIGI tracked for this action. Some enforcement actions resolve through injunctive relief, consent decrees, or behavioural undertakings rather than monetary penalty.

When did the action take effect?

The most recent activity on this action was published on 7/3/2023.

Enforcement action · IMY (Swedish DPA)

[IMY] Four companies must stop using Google Analytics

[IMY] Four companies must stop using Google Analytics is an AI-related enforcement action involving IMY (Swedish DPA). The Swedish Authority for Privacy Protection (IMY) has fined two companies and ordered three to stop using Google Analytics.

Action details

Agency: IMY (Swedish DPA)
Jurisdiction: SE
Enforcement type: fine
Document type: enforcement action
Topic: ai privacy

Summary

The Swedish Authority for Privacy Protection (IMY) audited four companies' use of Google Analytics. IMY fined two companies and ordered three to stop using the tool.

Primary source

https://www.imy.se/en/news/four-companies-must-stop-using-google-analytics/ →

[IMY] Administrative fee against Spotify
enforcement action 6/13/2023
[IMY] Administrative fines against Apoteket and Apohem for transferring personal data to Meta
enforcement action 7/3/2025
[IMY] Administrative fines against two companies in the SL Group
enforcement action 7/3/2025

Frequently asked questions

What is [IMY] Four companies must stop using Google Analytics?: The Swedish Authority for Privacy Protection (IMY) audited four companies' use of Google Analytics. IMY fined two companies and ordered three to stop using the tool. Primary source →
Which agency brought the action?: IMY (Swedish DPA) brought this enforcement action in SE. Primary source →
What was the penalty?: No specific penalty amount is disclosed in the primary source AIGI tracked for this action. Some enforcement actions resolve through injunctive relief, consent decrees, or behavioural undertakings rather than monetary penalty. Primary source →
When did the action take effect?: The most recent activity on this action was published on 7/3/2023. Primary source →
Where can I find the primary source?: The primary source for [IMY] Four companies must stop using Google Analytics is at https://www.imy.se/en/news/four-companies-must-stop-using-google-analytics/. AIGI does not paraphrase secondary commentary — every claim on this page links back to that primary source. Primary source →

Stay informed

Get every IMY (Swedish DPA) AI enforcement update.

Start 14-day trial →

Important — about this brief

This brief is published by AIGI as a regulatory intelligence service. It contains general information about AI laws, regulations, enforcement actions, and policy signals across jurisdictions. It is not legal, compliance, audit, or risk-management advice; it does not establish an attorney-client, advisory, or fiduciary relationship; and it should not be relied upon as a substitute for professional counsel applied to specific facts and circumstances. Where the brief identifies “Issues for Review,” those are observations of questions a reader in a particular role might raise with their own legal, compliance, or risk function — not recommendations to act. AIGI expressly disclaims liability for actions taken or not taken in reliance on this brief. Subscribers in regulated industries should consult licensed professionals authorized to practice in their jurisdiction.

Full disclosures →

Action details

Summary

Primary source

Related IMY (Swedish DPA) actions

Frequently asked questions

Related

Get every IMY (Swedish DPA) AI enforcement update.