IMY, the Swedish Data Protection Authority, reported receiving a total of 12,276 personal data breach reports during 2025, marking nearly a 90% increase compared to 2024. The figure also represents the greatest number of reported incidents since the General Data Protection Regulation (GDPR) was enforced in May 2018.
Most affected were businesses with a large
Register for free to keep reading
To continue reading this article and unlock full access to GRIP, register now. You’ll enjoy free access to all content until our subscription service launches in early 2026.
- Unlimited access to industry insights
- Stay on top of key rules and regulatory changes with our Rules Navigator
- Ad-free experience with no distractions
- Regular podcasts from trusted external experts
- Fresh compliance and regulatory content every day