Recording meetings in Sweden.
Sweden states the distinction most jurisdictions leave implicit: the criminal provision expressly turns on whether you are a party to the conversation.
The General Data Protection Regulation applies here of its own force rather than through a national translation of it, and the national act below handles the parts member states are left to decide for themselves. The supervisory authority enforces both. In Sweden that is Dataskyddslagen. Alongside it, Chapter 4 Section 9a of the Brottsbalken addresses unlawful eavesdropping, framed as secretly listening to or recording, by technical means, a conversation to which the person is not a party, or a meeting they have not been admitted to.
That drafting is unusually helpful. Because the provision names the party question directly, the line between recording a meeting you are in and recording one you are not is clearer in Sweden than in most of Europe. The data protection obligations are unchanged: a lawful basis, transparency at the time of collection, proportionality and bounded retention. One Swedish peculiarity worth knowing is the constitutional freedom-of-information tradition, which interacts with data protection in ways that surprise organisations arriving from elsewhere, particularly in the public sector.
- The data protection instrument
- Dataskyddslagen (Data Protection Act), SFS 2018:218
- Who supervises this
- Integritetsskyddsmyndigheten (Swedish Authority for Privacy Protection)
Criminal provisions
These sit alongside data protection law rather than replacing it. They generally address conduct that is covert or that involves conversations the recorder was not part of, which is a narrower category than everyday meeting recording, and a considerably more serious one.
Brottsbalken, Chapter 4, Section 9a
Criminal Code
Unlawful eavesdropping. The provision addresses secretly listening to or recording, by technical means, a conversation to which the person is not a party or a meeting or similar gathering they have not been admitted to.
What is specific to this country
- The GDPR applies directly in Sweden rather than through a national equivalent. A meeting recording that identifies the people in it is personal data, so making, storing and sharing it is processing, and it needs a lawful basis under Article 6.
- Transparency is a separate obligation from lawful basis. Article 13 requires that people are told what is being collected and why at the time it is collected, which for a meeting means at the start rather than afterwards.
- The Swedish provision is explicitly framed around being a party to the conversation, which draws the line more clearly than most European equivalents.
- Sweden's constitutional freedom-of-information tradition interacts with data protection in ways that surprise organisations arriving from other EU states, particularly in the public sector.
What to do in practice
The practice below is not the legal minimum in every jurisdiction. It is the practice that is defensible in all of them, which is a more useful target when your calls cross borders.
- Say it out loud at the start, before anything substantive is discussed, and say what the recording is for. Not a line in the invite nobody read.
- Give people a real way to decline. An announcement that leaves no room to object is closer to a notification than to consent.
- Write it down. A line in the notes recording that the meeting was recorded, and that nobody objected, is worth more later than anyone's memory of the moment.
- Keep external meetings to a higher standard than internal ones. Colleagues share an employment context; a customer, a candidate, or a supplier does not.
- Decide how long you keep recordings, and actually delete them. Indefinite retention converts a small, well-handled recording into a growing liability.
- Treat sharing as a fresh decision. The question is not whether you were allowed to record, it is whether this particular person was meant to hear it.
Questions
Does Swedish law distinguish participants from non-participants?
Explicitly. Chapter 4 Section 9a is framed around conversations the person is not a party to, or meetings they have not been admitted to. That is a clearer line than most European equivalents draw.
Does that mean recording my own meetings is unrestricted?
No. It means the criminal provision is aimed elsewhere. The data protection obligations still apply in full: you need a basis for recording, you have to tell people at the time, and you have to keep it only as long as the purpose holds.
Who supervises data protection in Sweden?
Integritetsskyddsmyndigheten, IMY, formerly Datainspektionen. Older sources use the previous name.
Sources
Primary sources, so you can check this rather than take our word for it.
Recording that announces itself.
Canto's notetaker joins as a named participant the organiser admits, and the recording, the transcript and who can see it stay under your control. 300 minutes a month, free forever.