Sweden. Comprehensive data protection. Act
PULPersonal Data Act 1998 (Personuppgiftslag, SFS 1998:204)
Repealed/superseded
§1Summary
- Synopsis
Sweden's implementation of Directive 95/46/EC. Its purpose was to protect people against violations of their personal integrity through the processing of personal data. It replaced the Data Act 1973. The government designated the supervisory authority. It was repealed on 25 May 2018, when the GDPR applied and the Dataskyddslagen took effect.
- Key themes
- Unique features
Framed around protection against 'personal integrity' violations rather than only registers.
- SaaS relevance
Historical only; replaced by the GDPR and the Dataskyddslagen (see se-dataskyddslag).
§2Obligations
- Breach notification
- None
- DPO
- No
§3Dates
- Key dates
- Adopted
- In force
- Ended
- Issued 29 April 1998; in force 24 October 1998; repealed 25 May 2018 (SFS 2018:218), the day the GDPR began to apply
§4Text and authority
- Text
- Authoritative text riksdagen.se
- Authority
- Datainspektionen (supervisory authority designated by the government)
§5Where it applies
- Domestic law of
- Sweden
§6Sources and verification
- Sources consulted
- Verification
High confidence.
The Act itself does not name the authority; the Datainspektionen was the designated supervisor (today IMY). That identification is not on the Riksdag page I read.