The EU's General Data Protection Regulation (GDPR) will apply from 25 May onwards. It is a binding EU law which will regulate how personal data may be processed within the EU. In connection with this, the Data Protection Act will cease to apply and a new act will be introduced instead to harmonise with the GDPR.
In the new Data Protection Act, the circumstances in which certain personal data may be used will be clarified. The new Data Protection Act will allow other laws that concern the processing of personal data to be amended and updated in connection with the introduction of the GDPR.
The Data Protection Act and the GDPR may not be applied if they do not comply with the provisions of the Freedom of the Press Act or the Fundamental Law on Freedom of Expression.
The Riksdag voted in favour of the Government's legislative proposal. These amendments come into force on 25 May 2018.