Swedish Supervisory Authority initiates review of Nobina’s monitoring of bus drivers
10 October 2023
GDPR
The Swedish Supervisory Authority (IMY) has started an investigation of Nobina’s personal data processing when monitoring bus drivers.
The investigation is based on a received complaint regarding the monitoring of bus drivers. The scope of the investigation is to overview Nobina’s compatibility of the key principles of the GDPR, the legal basis of the processing as well as the duty to inform the data subjects. As part of the investigation, IMY asks several questions that Nobina must answer as data controller. Nobina must, for example, answer whether the purpose with the processing could have been achieved with less invasive measures.