Deploys a chatbot, in Sweden

Brottsbalk (1962:700), 4 kap. 8 § · Read the law's page

• Do not unlawfully gain access to a message that a postal or telecommunications company conveys as a postal item or in an electronic communications network (Chapter 4, section 8).

Lag (2022:482), 9 kap. 27 § · Read the law's page

• Do not take part of, or otherwise process, the data in an electronic message transferred in a public electronic communications network or with a publicly available electronic communications service, or the traffic data belonging to the message, unless one of the users has consented to the processing or an exception in Chapter 9, section 27 or in Chapter 9, sections 1 to 3, 6 a and 31 applies; the consent of any one of the users is enough (Chapter 9, section 27).

Regulation (EU) 2024/1689 of the European Parliament and of the Council

• Tell a person when they are interacting with an AI chatbot.
• Disclose that synthetic media content was generated or manipulated by artificial intelligence.
• Complete a conformity assessment for a high-risk AI system used in an area such as employment, credit, or education.
• Maintain human oversight over a high-risk AI system used in an area such as employment, credit, or education.
• Provide an explanation of decisions made by a high-risk AI system used in an area such as employment, credit, or education.
• Disclose a summary of the training data used for a general-purpose AI model with systemic risk.
• Report incidents involving a general-purpose AI model with systemic risk.

Lagrådsremiss En ny produktansvarslag · Read the law's page

• The draft Produktansvarslag excludes free and open-source software that you develop or supply outside a business activity (Ch. 1, Sec. 1).
• If you develop, manufacture or produce a product, software included, or put your name, trade mark or another mark on it to present yourself as its maker, you answer as its manufacturer for damage a safety deficiency in it causes (Ch. 1, Sec. 4; Ch. 3, Sec. 1).
• Keep supplying the software updates and upgrades needed to keep the product safe while it is within your control: a deficiency due to your software or a related service is not excused because it arose after you placed the product on the market (Ch. 1, Sec. 4; Ch. 3, Sec. 5, second paragraph).
• Meet the product safety rules that apply to your product: they count in deciding whether it has a safety deficiency, and failing a rule meant to prevent the damage presumes a deficiency (Ch. 2, Secs. 2 and 4).
• Account for what your product learns or acquires after release: the effect of any ability to keep learning or to acquire new features is weighed in deciding whether it has a safety deficiency (Ch. 2, Sec. 2(4)).
• Be ready to produce a document or an object when a court orders it under the Code of Judicial Procedure; failing to do so presumes the product has a safety deficiency (Ch. 2, Sec. 4(1)).
• If you manufacture outside the European Economic Area, your importer, your representative or, where there is neither, your provider of distribution services answers for the product (Ch. 3, Sec. 1(3) and (4)).
• If you substantially change a product outside its manufacturer's control and then supply it, you answer as its manufacturer (Ch. 3, Sec. 4).
• If you distribute a product, or provide an online platform that lets a consumer conclude a distance contract with a trader, refer the injured person to the liable person established in the European Economic Area or to your own supplier within one month, or you answer for the product (Ch. 3, Secs. 2 and 3).
• Be able to show that you did not put the product on the market, that the deficiency probably did not exist then, that it results from compliance with product safety rules, or that scientific and technical knowledge made it impossible to discover (Ch. 3, Sec. 5).
• Do not rely on a contract term that is worse for the injured person than the Act: it has no effect against that person (Ch. 1, Sec. 5).

Statens offentliga utredningar 2025:101, Anpassningar till AI-förordningen · Read the law's page

• As proposed, SOU 2025:101 would designate Post- och telestyrelsen (PTS) as the coordinating market surveillance authority and single point of contact under the EU AI Act, with Integritetsskyddsmyndigheten (IMY) handling market surveillance of the Article 5 prohibited-practices and Article 50.3 transparency duties.