Collection and storage of personal data
Anyone who is going to collect or store personal data must notify the Swedish Data Protection Authority of this.
This is a requirement under the Swedish Personal Data Act (PUL), the purpose of which is to protect people against violations of their personal integrity through the processing of personal data.PUL covers both automated processing of personal data and manually maintained personal registers.
Purely private processing of personal data is exempt. Exemptions also apply with regard to the principle of public access to information, as well as freedom of the press and freedom of speech. The law is very much based on the consent of the person whose personal data is stored.
The EU General Data Protection Regulation will take effect on 25 May 2018. Contact Datainspektionen for more information.
Origin: Swedish Data Inspection Board
Responsible: Swedish Agency for Economic and Regional Growth