Law note · Sweden
Dataskyddslagen Chapter 7, Data-Subject Rights and Appeal Routes
cite Dataskyddslagen, ch. 7
stage In effect
since 2018-05-25
reviewed 2026-08-24
General Data Protection Regulation (GDPR) Articles 12-23 apply directly: access, rectification, erasure, restriction, portability, objection, and Article 22 automated-decision rights.
Dataskyddslagen Chapter 7, read directly, adds a domestic procedural layer: a controller's own decision on a rights request may be appealed directly to the general administrative courts (Sec. 2), separately from complaining to IMY, and IMY's own decisions are likewise appealable with IMY as the opposing party (Sec. 3), requiring permission for further appeal to kammarratten.
What it asks of an app
- Give a person in Sweden a path to obtain human intervention, express their view, and contest a decision made solely by automated processing that produces a legal or similarly significant effect on them, and expect a controller's own rights-request decision to be independently appealable to the administrative courts under Dataskyddslagen Chapter 7.
When LexLint raises it
Declared activities: high_risk_decisions, deploys_chatbot
Primary source: riksdagen.se, Dataskyddslagen ch. 7 (direct read)