New Government Inquiry May Broaden Swedish Employers’ Right to Background Checks, But Legislative Reform Will Likely Take Years
Background checks that involve criminal convictions and offences (i.e. personal data subject to Article 10 GDPR) have historically been difficult to process by Swedish employers. This has been particularly challenging in the private sector. The legal barriers to conduct background checks have increased due to recent developments in case law, such as the Swedish Supreme […]
European Commission Publishes Updated FAQ (v. 1.3) on the Data Act
On 12 September 2025, the European Commission published version 1.3 of the FAQ on the Data Act (Regulation 2023/2854). Click here to read the latest FAQ in its entirety. Click here to read our article on notable findings from the previous version. As with earlier iterations, the FAQ is not legally binding, but it serves […]
No Revolution in Sight: EU Court Upholds Narrow Interpretation on Pseudonymised Data
On 4 September 2025, the Court of Justice of the European Union (CJEU) delivered its judgment in Case C-413/23 P, European Data Protection Supervisor (EDPS) v. Single Resolution Board (SRB), clarifying when pseudonymised data may fall outside the scope of EU data protection law. The CJEU confirmed that pseudonymisation can, in principle, result in data […]
EU–U.S. Data Privacy Framework Survives Its First Major Test in Ruling by the EU General Court
Few topics in data protection spark as much debate as the transfer of personal data to the U.S. This issue has been at the centre of GDPR case law and regulatory guidance for years, with the Court of Justice of the European Union (CJEU) and regulators such as the European Data Protection Board (EDPB) frequently […]
The Swedish Consumer Agency Calls For a Ban on Telemarketing
The Swedish Consumer Agency (Sw. Konsumentverket) warns of rising telemarketing complaints in a new report, and calls for stricter rules, clearer information, and stronger protection for vulnerable groups, especially the elderly and those with foreign backgrounds. In the report delivered to the Swedish government, the agency proposes a general ban on telemarketing in Sweden. As […]
European Commission Publishes Training Data Summary Template for Providers of GPAI Models
Data training transparency is a core obligation under the AI Act (Regulation (EU) 2024/1689) for General-Purpose AI (GPAI) models placed on the Union market, including those distributed under free and open-source licenses. To support compliance with Article 53 of the AI Act, the European Commission has introduced a standardized Template for the Summary of Training […]
Commission Approves Draft Guidelines Clarifying Obligations for General-Purpose AI Models
The Guidelines were developed to clarify the application of Chapter V of the AI Act (Regulation (EU) 2024/1689), providing guidance on aspects essential for the implementation and understanding of the AI Act relating to general-purpose AI models (GPAI). Although the Guidelines have been published, they will be formally adopted by the European Commission at a […]
The AI Office receives the Final Draft of General-Purpose AI Code of Practice
The rules under Regulation 2024/1689 (AI Act) concerning general-purpose AI will come into effect on 2 August 2025. To provide additional guidance on these requirements, the AI Office has coordinated the development of the General-Purpose AI (GPAI) Code of Practice, which serves as a voluntary tool for AI model providers. The Code of Practice was […]
Two Regulatory Technical Standards (RTS) for the DORA have been published
The Commission has recently adopted two additional Regulatory Technical Standards (RTS) in the form of Delegated Regulations, thus completing the process of adopting all eight RTS. Technical standards will supplement and specify the rules of DORA (Regulation (EU) 2022/2554). From a regulatory perspective, these technical standards are complementary, providing more detailed specifications of specific requirements […]
Swedish DPA: Systematic Alcohol Tests May Qualify as Health Data
The Swedish DPA (IMY) has issued two decisions concerning the routine use of alcohol breath tests conducted on vessel captains operating within the regionally procured public transportation system in Stockholm. The tests were carried out systematically before and after each work shift, targeting personnel in safety-critical positions. Both the transport operator and the regional public […]