THE SWEDEN PERSONAL DATA PROTECTION ACT 1998Sweden enacted the Personal Data Act 1998 (PDA) to incorporate the provisions of the European Union’s (EU) Data Protection Directive (95/46/EC) into Swedish law. The PDA regulates the establishment and use, in both the public and private sectors, of automated data files containing information about natural persons. The intention of the law was to protect personal privacy and regulate misuse of personal information data bases.
The following questions have been addressed in this article:What is the historical background of the PDA?
What are the penalties for data controllers if they breach the law?
Does the PDA restrict the use of National Identification Numbers or information about the deceased?
How has Swedish case law interpreted the PDA?
What potential problems exist with respect to the PDA?