GDPR AI clause leak: why Article 88bis is no free pass
A leaked Council text of 3 September, document 12535/26, turns the Digital Omnibus AI clause into Article 88 bis: legitimate interest for AI training and deployment stays, but the Commission's four safeguards, including the unconditional right to object, are struck, while Germany wants a full presumption. For Swedish and EU teams on Azure the balancing test still applies, so document it now and build the objection path into your pipelines.
Who enforces the AI Act in Sweden? PTS and the new map
Sweden's AI Act enforcement map is now set: the SOU 2025:101 inquiry designates Post- och telestyrelsen (PTS) as coordinating market surveillance authority, with eleven surveillance bodies, two notifying authorities, and a PTS-run regulatory sandbox. The supplementary law was written to take effect on 2 August 2026 but awaits formal adoption, so PTS and its peers operate on interim government assignments while EU transparency rules already apply.
Who will knock on your door about AI in Sweden? IMY, mostly
On 15 June 2026 IMY confirmed its role as market surveillance authority for the EU AI Act, with responsibility covering AI systems in areas such as law enforcement and credit assessment, alongside PTS and Finansinspektionen. For Swedish enterprises this puts GDPR and AI Act supervision under one regulator, and IMY's sandbox role offers a way to get data protection guidance before enforcement reaches full strength in 2027.