Continue reading on DataGuidance with:
Free Member
Limited ArticlesCreate an account to continue accessing select articles, resources, and guidance notes.
Already have an account? Log in
Sweden: IMY publishes regulations on sanction list checks
On October 29, 2024, the Swedish data protection authority (IMY) announced that it had drawn up new regulations that make it easier for certain companies that handle personal data about violations of the law to carry out checks against various sanctions lists. In the past, companies had to apply for permission from IMY to be able to handle personal data on legal violations. With the new regulations, such companies no longer need to apply for permission.
According to IMY, the regulation affects various actors, including:
- companies that work in the financial sector that are under the supervision of the Swedish Financial Supervisory Authority (Finansinspektionen);
- companies in the security and defense market that are under the supervision of the National Inspectorate of Strategic Products; and
- certain companies in the security and defense market that are under the supervision of the Swedish Radiation Safety Authority.
The new regulations will enter into force on November 1, 2024.
Additionally, IMY has published guidance alongside the regulations providing supplementary information.
You can read the press release here, the new regulations here, and the guidance here, all only available in Swedish.