Insufficient legal basis for data processing
The Swedish Data Protection Authority has fined Nusvar AB, with 35,000 euros for publishing information about people’s credit histories and criminal convictions.
Nusvar AB, up until April offered subscribers the information it said was already in the public domain. The authority said Dec. 16 the company breached Sweden’s Credit Information Act because it didn’t get permission to publish the information.
The decision gives guidance to companies doing business in Sweden about when publishing personal information violates the nation’s credit information law, said Henrik Nilsson, an attorney at the WSA legal firm.