The Swedish Authority for Privacy Protection (“IMY“) has published its priorities for guidance and supervisory activities in 2026. IMY will focus its efforts on three areas where it identifies heightened privacy risks and a need for increased compliance with data protection rules. The overarching objective is to ensure that individuals can act safely and independently in the digital environment.
IMY’s three priority areas for 2026 are the following:
- Artificial intelligence in the public sector – IMY will monitor and follow up the use of AI by public authorities, with a focus on systems involving sensitive personal data and on ensuring compliance with data protection requirements where individuals have limited ability to opt-out.
- Data protection relating to children and minors – IMY will promote increased awareness of data protection risks affecting children and young people, and strengthen knowledge among both minors and adults who process their personal data, including parents and schools.
- Law enforcement tools from a data protection perspective – IMY will scrutinise the use of intrusive law enforcement tools, including covert measures and biometric data processing, to ensure that data protection safeguards and the right to privacy are upheld.
For the full press release, see here (in Swedish only).
