IMY report shows inadequate treatment of DPOs
24 February 2023
The Swedish Authority for Privacy Protection (IMY) has published a report concluding that a minority of Data Protection Officers (DPOs) claims their organization works with data protection on a regular basis.
IMY’s report is based on a survey where DPOs from almost 800 organizations participated. Among other things, the publication shows that 50% of the DPOs think that they get involved too late. Furthermore, the survey states that 25% of the DPOs do not have specific time allocated for issues related to data protection and that half of the ones who do have allocated time claims that it is not sufficient. In the report, IMY emphasizes the importance of granting resources to the DPO, such as sufficient time and information.