The Data Inspectorate has launched a review of how Spotify handles users’ requests to know what information it holds about them.
Background: As part of the rights enshrined in the GDPR, citizens have a right to access the data companies hold about them. Businesses have to provide this information in a complete and timely way when requested.
The Swedish inquiry: The country’s data protection authority, Data Inspectorate (Data Inspektionen) has become aware that there may be some shortcomings in how Spotify handles these requests. It notes the extracts provided to users are not complete, and the information is not sufficiently clear. As a result, the authority wrote a letter to the company, to announce an investigation.
Next steps: The authority expects an answer by 1 July 2019. The timeframe of the decision is currently unclear; on its part, Spotify has announced its intention to fully cooperate with the authority on the investigation.
