SwedenConsumer Credit Act (2026:1011), Chapter 2 Section 7 and Chapter 3 Section 15, Personalised Offers and Credit Assessment by Automated Processing
Konsumentkreditlag (2026:1011), 2 kap. 7 § och 3 kap. 15 §
An AI sector rules rule binding private bodies.
- Obligation class
- Disclosure, Data subject rights
As of .
What it requires
- This Act takes effect on (transitional provision 1), so the duties below do not bind before then.
- If you offer a consumer a personalised offer of credit that rests entirely on automated processing of personal data, tell the consumer so clearly and comprehensibly (Chapter 2, section 7).
- If your credit assessment involves automated processing of personal data, on the consumer's request review the assessment through human involvement, explain it and the significance of the automated processing for the decision on the application, and inform the consumer of the risks of automated processing (Chapter 3, section 15, first paragraph).
- Inform the consumer of those possibilities in connection with the credit assessment (Chapter 3, section 15, second paragraph).
Who enforces it
Enforcement body
The Swedish Consumer Agency (Konsumentverket) can issue a warning, with a sanction fee, to a trader that does not follow Chapter 3, section 15 (Chapter 9, section 6).
Settledness
- As of
- Open questions
- Does 'helt grundar sig på en automatiserad behandling av personuppgifter' in 2 kap. 7 § cover an offer where a person sets the parameters of a scoring model but does not review the individual offer?
- Does 'genom mänsklig medverkan' in 3 kap. 15 § require that the person who reviews the credit assessment has authority to change the outcome, or is a review that only confirms the automated result enough?
What it makes you log
Logging duty
Chapter 2, section 7 and Chapter 3, section 15 require information and a review on request and state no duty to keep logs or records.
- Kind
- None
- As of
What this law does
Chapter 2, section 7 of the Consumer Credit Act requires the consumer to be informed clearly and comprehensibly where a personalised offer of credit rests entirely on automated processing of personal data.
Chapter 3, section 15 requires a trader whose credit assessment involves automated processing of personal data to review the assessment on the consumer's request, through human involvement, to explain it and the significance of the automated processing for the decision on the application, and to inform the consumer of the risks of automated processing. The trader must also inform the consumer of those possibilities in connection with the credit assessment.
Chapter 9, section 6 lets the Swedish Consumer Agency (Konsumentverket) issue a warning to a trader that does not follow Chapter 3, section 15, and the warning carries a sanction fee where the breach is not minor. Chapter 9, section 7 sets the sanction fee at no less than SEK 5,000 and no more than SEK 10 million, and not above 10 percent of the trader's turnover in the preceding financial year. Transitional provision 1 provides that the Act takes effect on . The Act was issued on .
When LexLint raises it
When your app profile says your app provides financial services or makes high-risk automated decisions.