Law note · Sweden
GDPR Chapter V, Cross-Border Transfer Restrictions
cite Regulation (EU) 2016/679, Arts. 44-49, 83(5)
stage In effect
since 2018-05-25
reviewed 2026-08-24
A transfer of personal data outside the EEA requires an adequacy decision, Standard Contractual Clauses, Binding Corporate Rules, or a narrow Article 49 derogation, backed by the Article 83(5) top fine tier. Dataskyddslagen's seven chapters, confirmed against the statute text, contain no separate chapter addressing cross-border transfer, so Chapter V governs unmodified with no Sweden-specific derogation identified.
What it asks of an app
- Rely on an adequacy decision, Standard Contractual Clauses, Binding Corporate Rules, or a narrow Article 49 derogation before moving personal data of a person in Sweden outside the EEA.
When LexLint raises it
Declared activities: crawls_web, trains_models
Primary source: GDPR Arts. 44-49, 83(5)
Dataskyddslagen (direct read, no separate transfer chapter found)