Background & Purpose

Swedish authorities needed better ways to manage their IT systems and data. The new rules aim to make it easier for them to outsource or coordinate their IT operations while ensuring data security.

Proposals & Debate

The government proposed allowing Swedish authorities to share classified information with private companies or other public bodies for technical processing or storage. This also includes new rules limiting the freedom to report information (meddelarfrihet) for individuals bound by secrecy laws when handling this outsourced data.

The Decision

The Swedish Parliament approved the government's proposal, meaning authorities can now outsource the technical processing and storage of classified information. This decision also includes new rules for secrecy and freedom of speech for those involved.

Does this affect you?

  • Swedish Public Authorities: They gain more flexibility to outsource their IT operations, including those involving classified information, potentially leading to more efficient services.
  • IT Service Providers: Companies offering technical processing or storage services can now bid for contracts involving classified data from public authorities, but must adhere to strict new secrecy laws.
  • Employees of IT Service Providers: Individuals working with outsourced classified data will be subject to new confidentiality obligations and limitations on their freedom to report information (meddelarfrihet).
  • Citizens: Their personal and sensitive data, handled by public authorities, will now be processed or stored by external parties under new, stricter data protection rules.

In Practice

  • Swedish authorities can now hire private companies or other public bodies to handle technical processing and storage of classified information.
  • Companies or individuals performing these IT services will be bound by strict secrecy rules.
  • Employees working with this outsourced classified data will have limitations on their freedom to report information (meddelarfrihet).
  • The changes aim to make it easier for authorities to manage their IT systems more efficiently.
  • The new rules also aim to strengthen the protection of sensitive data when it is handled by external parties.