Go to Wolters Kluwer VitalLaw.comGo to Wolters Kluwer VitalLaw.com
VitalLaw®
  • Find answers to your questions
  • Log in to access your subscriptions
In depth. On point.
In depth. On point.
  • Home
  • Legal Directory
  • Home
  • Legal Directory
In depth. On point.
  • Articles
    • Articles
  • Organizations
    • Organizations
    • Rep. Green Urges Cyber Vigilance Amid New Reports of Foreign Election Meddling
    • Australian Regulator Sends Letter on Common Weaknesses in Cyber Control
    • Children’s Data Protection Guidance Released by Polish DPA
    • Lawmakers Sound Cyber Alarm Over Chinese Home Routers
    • Parties Raise Privacy Concerns Over California LifeLine Proposal
    • Portuguese Court Upholds Fine Against Lisbon Over Unlawful Data Processing
    • Swedish DPA Finalizes Requirements for Certification Body Accreditation
    • Swiss Federal Council Approves Data Privacy Pact With U.S.
    • Treasury Reveals $60M Penalty for T-Mobile Over Foreign-Ownership Violation
  • Articles
    • Articles
  • Organizations
    • Organizations

    Cybersecurity Policy Report, Swedish DPA Finalizes Requirements for Certification Body Accreditation, (Aug 15, 2024)

    By Tony Foley

    The Swedish Privacy Protection Authority (IMY) has finalized regulatory requirements for the accreditation of certification bodies under the European Union’s General Data Protection Regulation (GDPR).

    The finalized requirements come after the E ...

    By Tony Foley

    The Swedish Privacy Protection Authority (IMY) has finalized regulatory requirements for the accreditation of certification bodies under the European Union’s General Data Protection Regulation (GDPR).

    The finalized requirements come after the European Data Protection Board (EDPB) issued an opinion in June on IMY’s proposed requirements, in which the EDPB recommended a series of changes to the draft requirements (CPR, June 4).

    In a news release issued yesterday, IMY said the finalized requirements must be applied by the Board for Accreditation and Technical Control (Swedac) when it accredits certification bodies that will, in turn, issue certifications as provided under the GDPR. IMY noted that certification was an instrument making it easier for companies to comply with GDPR requirements, as well as to show that their processing of personal data is legal. The final IMY decision on accreditation requirements will make it possible for certification bodies seeking to issue certificates in Sweden to start up their businesses.

    “Accreditation is a seal of quality that ensures that the certification body's tests are carried out impartially, correctly and in accordance with internationally recognized standards,” the news release said. “Certification bodies that wish to issue certificates under the Data Protection Regulation must be accredited to conduct their business.”

    IMY added that certificates must be issued according to certification schemes approved by a competent supervisory authority or the EDPB, in order to guarantee a high level of data protection. With the final decision, organizations may apply for accreditation with Swedac, but for those seeking to have a certification scheme approved, an application to IMY must be submitted.

    The text of the finalized accreditation requirements may be downloaded from the news release but is available only in Swedish.

    News: InternationalLegislation DataPrivacy GDPR

    © 2026 CCH Incorporated and its affiliates and licensors. All rights reserved.

    • Manage Cookie Preferences
    • Privacy Statement
    • Terms of Use