When is consent required for cookies and trackers in Sweden?
Reading or storing information on someone's equipment requires that the user first receives information and gives consent. The exemption covers only storage needed to transmit a communication or to deliver a service the user has expressly requested. Declining must be as easy as accepting, and the consent must be possible to demonstrate afterwards.
Source
- Reference
- Electronic Communications Act (2022:482) chapter 9 section 28, read with GDPR (EU) 2016/679 Article 7
- Acts
- —
- Area
- Data protection and cybersecurity
- Read date
- 2026-09-22
Other acts in the same area
- Dataskyddslagen · SFS 2018:218
- Kamerabevakningslagen · SFS 2018:1200
- Kreditupplysningslagen · SFS 1973:1173
- NIS-lagen · SFS 2018:1174
- LEK · SFS 2022:482
Questions and answers
Ready-made pack
GDPR incident pack
total 98.75 € (about 107 USD)
The basis for what you just read, ready for the file.
What you need once a personal data breach has happened: the notification articles, the risk profile and a ready evidence chain.
Evidence chain, hash and read date per row. One-time purchase, delivered instantly.
Next step
Three ways to put the register to work in your own practice.
Start with your task
Litigation
Find support in a judgment
Search guiding decisions, see what became final and follow changes in the law.
In-house, deals
Map the rules in a transaction
Move from theme to act and on to the article that carries the duty.
Compliance
Assess the risk in a process
Risk scoring per legal area, with the sources behind every score.