Checked on September 27, 2026
GDPR in Sweden
How the GDPR works in Sweden: the supervisory authority, the national law that supplements the regulation, and where to notify a breach.
- Supervisory authority
- Swedish Authority for Privacy Protection (IMY) (Integritetsskyddsmyndigheten)
- National law supplementing the GDPR
- Act (2018:218) with supplementary provisions to the EU General Data Protection Regulation · Lag (2018:218) med kompletterande bestämmelser till EU:s dataskyddsförordning · SFS 2018:218
- Age of digital consent
- 13
- Breach notification
- e-tjanster.imy.se/sv/anmalan
- National specifics
- Breaches are reported via IMY's e-service (Swedish or English); supplementary information can be added within four weeks.
Where does your company stand?
The free assessment applies these national rules to your answers and scores every area of the law.
Sources
National laws and portals change. This page is general information, not legal advice; confirm with the authority before relying on it.