SwedenDataskyddslagen Chapter 7, Data-Subject Rights and Appeal Routes
A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.
What follows is LexLint's own research summary of this law, not legal advice.
In force since 25 May 2018.
A data subject rights rule binding public and private bodies.
As of 24 August 2026.
What it requires
- Give a person in Sweden a path to obtain human intervention, express their view, and contest a decision made solely by automated processing that produces a legal or similarly significant effect on them, and expect a controller's own rights-request decision to be independently appealable to the administrative courts under Dataskyddslagen Chapter 7.
What this law does
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.
General Data Protection Regulation (GDPR) Articles 12-23 apply directly: access, rectification, erasure, restriction, portability, objection, and Article 22 automated-decision rights.
Dataskyddslagen Chapter 7 adds a domestic procedural layer: a controller's own decision on a rights request may be appealed directly to the general administrative courts (Sec. 2), separately from complaining to IMY, and IMY's own decisions are likewise appealable with IMY as the opposing party (Sec. 3), requiring permission for further appeal to kammarratten.
When LexLint raises it
high_risk_decisionsdeploys_chatbot
Read the law
riksdagen.se, Dataskyddslagen ch. 7
Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.