What is covered
Three Swedish-law-specific entries: the inline live dataskyddslagen and imy-supervision plus two unwired draft modules.
Live articles
swedish-law/dataskyddslagen — Swedish Data Protection Act
KB/src/kb/index.ts:147–193. Brief overview. Notes Sweden implements GDPR via Dataskyddslagen (SFS 2018:218), national variations (digital age of consent at 13, personnummer rules under § 3, employment context). Three sections, ~3 paragraphs each. Cites Riksdagen + IMY.
swedish-law/imy-supervision — IMY
KB/src/kb/index.ts:194–233. IMY’s role and powers under GDPR Art. 51/58, enforcement priorities (cookies, children’s data, health data, B2B data brokers), complaint process (3–6 months for straightforward cases). Cites IMY Annual Report 2024.
Unwired drafts
swedish-law/dataskyddslagen.ts
KB/src/kb/swedish-law/dataskyddslagen.ts (~155 lines, 7 sections). Much deeper: chapter structure of the law, age-of-consent threshold rationale, Personnummer restriction under Ch. 3 § 10 (B2B implications for sole traders and Bolagsverket-sourced board records), freedom-of-expression carve-out under Ch. 4 rooted in Tryckfrihetsförordningen + Yttrandefrihetsgrundlagen, criminal record data restrictions (Ch. 3 §§ 5–9), IMY’s procedural framework and fee regime, and adjacent regimes (Kreditupplysningslagen, Marknadsföringslagen).
swedish-law/bolagsverket.ts
KB/src/kb/swedish-law/bolagsverket.ts (~190 lines, 6 sections). Comprehensive treatment of Bolagsverket as a data source: legal mandate (Aktiebolagslagen 2005:551, Handelsregisterlagen 1974:157), full enumeration of publicly available registry fields (organisationsnummer, board members, share capital, SNI codes, beneficial ownership under SFS 2017:631), personnummer restriction details, FTF (Foretagsfakta) bulk data feed terms, SNI ↔ NACE mapping, and a six-step lawful-use framework for an enrichment pipeline.
This module is the single most useful document in KB/ for the Bolagsverket Import pipeline because it spells out exactly which fields can be retained and which (personnummer) require Dataskyddslagen Ch. 3 § 10 justification.
Cross-references
- Bolagsverket Import — production ingest of these fields. Personnummer handling is not currently audited against Ch. 3 § 10 — see Known Issues if filing a follow-up.
- Reklamspärr — Swedish marketing opt-out registry; complementary to Dataskyddslagen.
See also
KB Content Index, KB GDPR Articles, KB IMY Decisions, Bolagsverket Import.