Provides financial services, in Sweden

Lag (2024:1278) med kompletterande bestämmelser till EU:s förordning om digital operativ motståndskraft för finanssektorn, 1-5 kap. · Read the law's page

• If you are a financial entity within Regulation (EU) 2022/2554 (DORA) supervised in Sweden, comply with DORA as the Act supplements it; the Finansinspektionen is your competent authority and supervises compliance (chapter 1, section 2, and chapter 3, section 1).when it serves a financial business
• If the Finansinspektionen designates you to carry out threat-led penetration tests under DORA Article 26, carry them out as often as it decides, and give the Riksbank the information it requests for its oversight and coordination of the tests (chapter 2, sections 1 and 4).for a financial business
• Provide the Finansinspektionen with the information and documents it orders, attend a hearing it summons you to, and allow it to inspect your premises when necessary for supervision (chapter 3, sections 2 and 3).when it serves a financial business
• Pay the annual fee that funds the Finansinspektionen's work under DORA and the Act (chapter 1, section 3).for a financial business

PTSFS 2024:6, Post- och telestyrelsens föreskrifter om vissa tjänsters tillgänglighet · Read the law's page

• Prepare the information on how your service meets the accessibility requirements with a general description of the service in accessible formats, the explanations needed to understand how it works, and a description of how the requirements are met; you may apply harmonized standards and technical specifications whose references are published in the Official Journal of the European Union (PTSFS 2024:6, s. 3).
• Provide information showing that your service delivery process and its control ensure conformity, and include the accessibility information in the general terms of the service or an equivalent document (PTSFS 2024:6, ss. 4 and 5).
• If you provide an electronic communications service, provide real-time text in addition to voice, and total conversation where you provide video in addition to voice (PTSFS 2024:6, s. 6).
• If you provide a banking service, provide identification methods, electronic signatures, security functions and payment services that are perceivable, operable, understandable and robust, and keep the information about the service at no more than CEFR level B2 (PTSFS 2024:6, s. 7).
• If you provide an e-commerce service, provide information on the accessibility of the products and services sold when the responsible economic operators supply it, and make identification, security and payment functions and methods perceivable, operable, understandable and robust (PTSFS 2024:6, s. 8).

PTSFS 2024:7, Post- och telestyrelsens föreskrifter om kriterier för bedömning av oproportionerligt stor börda · Read the law's page

• When you assess whether an accessibility requirement imposes a disproportionate burden, count the one-off organizational costs of additional accessibility staff, training and competence, a new process for including accessibility in development or service provision, guidance material, and reading the accessibility legislation (PTSFS 2024:7, s. 3).
• Also count the costs of ongoing manufacture and development: designing accessibility features, the manufacturing process, testing for accessibility, and documentation (PTSFS 2024:7, s. 4).

Tillgänglighetsförordningen (2023:676), 4-7 a §§ och bilagorna 1-3 · Read the law's page

• If you place a product covered by the Act on the market, make it meet Annex 1: easily accessible information on its function and accessibility features on or with the product, information that can be perceived by more than one sense, a user interface and functions that persons with disabilities can access, perceive, operate, understand and control, accessible support services, and accessible packaging and instructions (Ordinance, s. 4 and Annex 1; Directive (EU) 2019/882, Annex I, Section I and II).
• If you provide a service covered by the Act, make it meet Annex 2: the products used in the service meet Annex 1, information about how the service works is accessible, websites and mobile services are perceivable, operable, understandable and robust, and support services give accessibility information (Ordinance, s. 6 and Annex 2; Directive (EU) 2019/882, Annex I, Section III).
• From 1 May 2026, where Annexes 1 and 2 do not cover a function in the design of a product or the provision of a service, use the functional performance criteria in Annex 3, which you may also use as an alternative to a specific technical requirement if the result is equivalent or better accessibility (Ordinance, s. 7 a and Annex 3; Directive (EU) 2019/882, Annex I, Section VII).

Tillgänglighetslagen (2023:254), tillsyn och sanktioner, 28-41 §§ · Read the law's page

• Remedy a deficiency in a product or service within the time the market surveillance authority or supervisory authority sets when it calls on you to do so, and comply with the orders it makes if you do not (Act, ss. 32 and 34; Directive (EU) 2019/882, Arts. 19 and 23).
• If you deal with products, give the market surveillance authority on demand documents, specifications, data or information, access to premises, land and means of transport, and product samples it may obtain, inspect and dismantle (Act, s. 29; Regulation (EU) 2019/1020, Art. 14(4)(a), (b), (e) and (j)).
• Pay a sanction fee decided under section 37 within thirty days of the decision becoming final or within the longer time the decision states; the fee is paid to Kammarkollegiet (Act, s. 40; Ordinance, s. 33).
• If you are an economic operator and the authority orders you, under sections 32 to 34, to remedy a deficiency, expect the order to carry a vite that the administrative court can impose on the authority's application if you do not comply (Act, s. 35; Vite Act (1985:206), ss. 3 and 6).

Tillgänglighetslagen (2023:254), tjänster, 2 §, 4-6 §§, 9 §, 10 § första stycket, 24-27 §§ och övergångsbestämmelserna · Read the law's page

• If you offer to consumers an electronic communications service (other than machine-to-machine transmission), access to audiovisual media services, consumer banking services, e-books or an e-commerce service, or the website, app, e-tickets, ticket sales, travel information or interactive self-service terminals of a bus, ship, air or rail passenger transport service (for urban, suburban and regional transport, only the self-service terminals), provide it only if it meets the accessibility requirements in Annex 2 to Förordning (2023:676) and the supplementary rules of the authority concerned (Act, ss. 4 and 6; Ordinance, ss. 6 and 7; Directive (EU) 2019/882, Art. 4(1) and (3)).
• Keep the service in conformity with the accessibility requirements continuously, and if it does not conform take the action needed to bring it into conformity and notify at once the supervisory authorities of every Member State where the service is provided, with details of the non-conformity and the action taken (Act, s. 24; Directive (EU) 2019/882, Art. 13(3) and (4)).
• Prepare information on how the service meets the applicable accessibility requirements, including a description of the service's design and operation where needed to assess conformity and, where you invoke section 7, which requirements the exemption covers; make it available to the public in written and oral form, including in a form accessible to persons with disabilities, keep it as long as the service is provided, and include it in the general terms of the service or an equivalent document (Act, s. 25; Ordinance, s. 24; PTSFS 2024:6, ss. 3 to 5; Directive (EU) 2019/882, Art. 13(2)).
• On request from a supervisory authority, give it all the information needed to assess conformity and cooperate on the action to be taken (Act, s. 26; Directive (EU) 2019/882, Art. 13(5)).
• If you are responsible for the content of an e-book you must see that the accessibility requirements are met even if you are not a service provider (Act, s. 27).
• If you are a microenterprise (fewer than ten employees and an annual turnover or annual balance sheet total of no more than EUR 2 million), you are exempt from the service accessibility requirements; if you are not, they apply to you in full (Act, ss. 2 and 10; Directive (EU) 2019/882, Art. 4(5)).
• Content on websites and apps that is pre-recorded time-based media or a document file format published before 28 June 2025, or archive content not updated or edited after that day, is outside the Act (transitional provision 2).
• You may keep using products you lawfully used for similar services before 28 June 2025 until 27 June 2030, and finish service contracts concluded before that day when they expire, no later than 27 June 2030; self-service terminals lawfully in use before that day may stay in use for 20 years after they were taken into use (transitional provisions 3 to 5; Directive (EU) 2019/882, Art. 32).

Tillgänglighetslagen (2023:254), undantag, 7 §, 8 §, 10 § och 33 § · Read the law's page

• If you rely on a fundamental alteration of the product or service or on a disproportionate burden to set an accessibility requirement aside, document and keep your assessment with the reasons, and notify the market surveillance authority or supervisory authority that you invoke the exemption (Act, ss. 7 and 8; Directive (EU) 2019/882, Art. 14(2) and (3)).
• Base a disproportionate-burden assessment on the net costs of compliance in relation to your total costs and net turnover, and on the estimated costs and benefits in relation to the estimated benefit for persons with disabilities, applying the cost items of PTSFS 2024:7 (Ordinance, s. 8).
• If you provide a service and rely on a disproportionate burden, renew the assessment within five years of the last one, and sooner when the service is altered or a supervisory authority asks (Ordinance, s. 10; Directive (EU) 2019/882, Art. 14(5)).
• Keep the documentation of the assessment for at least five years from the last time a product was made available or a service provided, and give a copy to the authority on request (Act, s. 8; Ordinance, s. 11).
• You cannot rely on a disproportionate burden if you received external funds to make the product or service more accessible and an exemption reasonably should not apply (Act, s. 7, second paragraph; Directive (EU) 2019/882, Art. 14(6)).
• If the authority finds shortcomings in your assessment, remedy them within the time it sets, or make a new assessment within the time it orders (Act, s. 33).
• A manufacturer that relies on the exemption states in the EU declaration of conformity which requirements it covers; an importer ensures the manufacturer has completed the assessment, declaration and marking steps, and a distributor checks the CE marking and information text before the product is made available (Act, ss. 12, 15 and 16).
• If you are a microenterprise that deals with products and invoke an exemption, you need not document the assessment or notify the authority, but must give the market surveillance authority the facts relevant to the assessment if it asks (Act, s. 10; Directive (EU) 2019/882, Art. 14(4)).

Cybersäkerhetsförordning (2025:1507), 4-8 §§ och 18 § · Read the law's page

• If you are an operator within a sector that the Cybersäkerhetslag (2025:1506) covers, send your registration notification under chapter 2, section 2 of the Act to the single point of contact (section 5 of the ordinance).
• Report incidents under chapter 2, sections 5 to 8 of the Act to the CSIRT unit (section 6 of the ordinance).

Konsumentkreditlag (2026:1011), 2 kap. 7 § och 3 kap. 15 § · Read the law's page

• If you offer a consumer a personalised offer of credit that rests entirely on automated processing of personal data, tell the consumer so clearly and comprehensibly (Chapter 2, section 7).when it serves a financial business
• If your credit assessment involves automated processing of personal data, on the consumer's request review the assessment through human involvement, explain it and the significance of the automated processing for the decision on the application, and inform the consumer of the risks of automated processing (Chapter 3, section 15, first paragraph).when it serves a financial business
• Inform the consumer of those possibilities in connection with the credit assessment (Chapter 3, section 15, second paragraph).when it serves a financial business
• This Act takes effect on 20 November 2026 (transitional provision 1), so the duties below do not bind before then.