The Swedish Data Protection Authority ordered SL to pay SEK 16 million as early as 2021. According to the authority, the cameras were used in a way that violated the data protection regulation – partly because they recorded for too long, partly because the cameras were used to more easily identify thieves.
Two appeals later, the Court of Appeal rules that SL must pay 8 of the 16 million. According to the court, only the point about establishing identities is contrary to the regulation.
The decision can be appealed to the Supreme Administrative Court. Since 2021, SL has changed the way it works with the cameras.