Anyone who considers that the processing of personal data relating to him or her infringes the EU General Data Protection Regulation has the right to lodge a complaint with a supervisory authority. In Sweden, the Swedish Authority for Privacy Protection is the supervisory authority in the area of data protection. In case no 6193-22 the Swedish Authority for Privacy Protection had decided to close a matter of complaint. According to the Supreme Administrative Court, a decision determining that the Swedish Authority for Privacy Protection will not do what has been requested in a complaint must be regarded as a legally binding decision which is appealable in accordance with the EU General Data Protection Regulation. In case no 3691-22 the Swedish Authority for Privacy Protection had initiated a supervisory matter in response to a complaint. The Authority then decided to close the matter without action being taken. The Supreme Administrative Court found that such a decision, where the outcome of the supervisory matter deviates from what has been requested in the underlying complaint, also is appealable in accordance with the EU General Data Protection Regulation.
Read the judgment here: