IMY: Spotify isn’t transparent enough
The oversight body of Spotify is IMY, a Swedish regulatory agency tasked with promoting the protection of personal data and monitoring how it is processed. According to the organization’s statement, while Spotify shares personal data at the request of the user, it does not provide enough clear information about how this data is used.
Must be written in the native language of the person
The agency says Spotify should be more specific about how and for what purposes personal data is processed. He also stated that personal data that are difficult to understand, such as technical ones, should be disclosed not only in English but also in the native language of the person, and there are deficiencies in these parts.