The Austrian-based digital rights organization, noyb, reveals a concerning loophole in Swedish law exploited by data brokers like MrKoll, allowing them to sidestep the stringent regulations of the EU’s General Data Protection Regulation (GDPR). MrKoll leverages a media license to profit from the sale of vast amounts of personal data of nearly the entire Swedish populace, flouting GDPR safeguards and restrictions.
Despite lacking any journalistic purpose, MrKoll and similar entities acquire extensive personal information, including names, real-estate values, and even criminal records, due to lax Swedish legislation granting GDPR exemptions to media companies. This easy access to sensitive data poses serious privacy risks, with potential consequences ranging from identity theft to aiding criminal activities.
noyb, having filed a complaint with the Swedish data protection authority (IMY), emphasizes the urgent need for regulatory intervention to prevent further misuse of personal data. The lax enforcement of GDPR in Sweden not only violates individuals’ privacy rights but also facilitates criminal exploitation, underscoring the necessity for stricter oversight and adherence to EU privacy laws.