SwedenLag (2024:1146) om vissa forskningsdatabaser (Act on certain research databases), pseudonymised release to research projects
Lag (2024:1146) om vissa forskningsdatabaser, 3 kap. 4 to 6 §§
In force since .
A de-identification rule binding government bodies.
- Instrument type
- an act of a legislature
What it requires
- Release personal data from a research database to a research project, or for an inquiry, only as pseudonymised data or data protected in an equivalent way, unless direct identifiability is necessary for the purpose of the research or inquiry (Lag 2024:1146, 3 kap. 4 §).
- Release supplementary data that identify a registered person, including personal identity numbers, to an authority only where necessary for the authority to release data on the same persons to the project that received the pseudonymised data (Lag 2024:1146, 3 kap. 5 §).
- Keep a list of the supplementary data needed to identify a registered person for as long as necessary (Lag 2024:1146, 3 kap. 6 §).
These lines are LexLint's reading of the law's text.
What this law does
Chapter 3, section 4 of Lag (2024:1146) allows a university or other higher education institution to release personal data from a research database to a research project or an inquiry only as pseudonymised data or data protected in an equivalent way, though the data may be directly identifiable where that is necessary for the purpose of the research or inquiry.
Chapter 3, section 5 allows the supplementary data that identify a registered person to be released to an authority only where necessary for it to release data on the same persons to the research project that received the pseudonymised data, and section 6 requires the controller to keep a list of that supplementary data for as long as necessary.
When LexLint raises it
When your app profile says your app processes de-identified data or serves colleges and universities.
Back to the example · Lint your app
Page updated .