Skip to Primary Navigation

Swedish insurer Trygg-Hansa sanctioned over data failures

lifebuoy with the company name on it
Photo: Trygg-Hansa

Customer data was possible to access online openly for over two years.

The Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten (IMY), has sanctioned Swedish insurer Trygg-Hansa Skr 35m ($3.2m) over having the data of 650,000 customers online for more than two years.

After a tip, IMY found that, without having to log in, anyone could access customers’ data to one of their branches, Moderna

Get full access, free for a month

Start your 28-day free trial to continue reading and access
all content on GRIP – no payment details required.

What’s included:

  • Every new article, plus our 5,000+ archive
  • Daily regulatory insight and guidance
  • Exclusive interviews and in-depth analysis
  • Coverage of industry-leading events and conferences
  • All podcasts and videos, featuring industry experts
  • The full set of Rules Navigator tools
  • An ad-free experience