According to the Swedish Data Protection Act (DPA), the right to information (art. 13-14 GDPR) and right of access to personal data (Art. 15 GDPR) do not apply to data that is subject to secrecy regulations (see Chapter 5(1) DPA). In addition, the right of access to personal data does not apply to present data contained in running text that constitute rough drafts or notes, unless the personal data has been transferred to third parties, is processed for archiving or statistic purposes or has been processed for longer than one year (see Chapter 5(2) DPA).
The Swedish government may issue further exemptions pursuant to Art. 23 GDPR.
