se-03-25-decisionpublic.pdf

Here are the key points summarized:

Summary

The Swedish Authority for Privacy Protection (IMY) has investigated a case involving Klarna, a payment service provider, and found that they had breached Article 15 and 12(3) of the General Data Protection Regulation (GDPR). The breach occurred when Klarna failed to provide a data subject with access to their personal data and supplementary information without undue delay. IMY has chosen not to impose an administrative fine but instead issued a reprimand.

Key Points

1. Klarna received a request for access to personal data from a data subject on April 15, 2022.
2. The company failed to provide the requested information within the required timeframe.
3. After IMY initiated supervision of the case, Klarna contacted the data subject and announced its intention to comply with the request.
4. IMY found that Klarna's actions constituted a minor infringement under the GDPR.
5. As a result, IMY issued a reprimand to Klarna instead of imposing an administrative fine.

Please note that this summary is based on my understanding of the document and may not be exhaustive or entirely accurate.