The Legal 500 > Europe, Middle East & Africa > Sweden > Data privacy and data protection

Cirio Advokatbyrå AB’s Caroline Olstedt Carlström is a leading name in the Swedish market for data privacy and data protection work and acts as data protection officer for high-profile banks, stock markets, trade unions, IT suppliers and other data processors. The team regularly provides comprehensive advice on GDPR implementation and compliance issues and also assists with the handling of sensitive data on outsourcing projects, M&A transactions and the implementation of clients’ e-commerce platforms and digital services products. David Frydlinger is also a noted name in the field.

With a long established practice in data privacy and an extensive global client base, DLA Piper is well-placed to handle the full suite of data issues including large-scale data processing applications, GDPR implementation and compliance work, cross-border data sharing matters and representation before the Data Inspection Board. Clients praised the firm’s provision of innovative tools and apps which help facilitate daily data privacy and protection requirements. Practice head Johan Sundberg is also part of the firm’s market-leading employment practice, and is well-placed to assist with employee data mandates.

The highly praised team of data protection and data privacy professionals at Advokatfirman Kahn Pedersen KB provides advice on the full spectrum of issues relating to GDPR, data sharing with third parties, data processing contracts and outsourcing issues. Stand-out individuals including practice head Johan Kahn, Daniel Lundqvist and senior specialist Martin Brinnen are advisors to high-profile insurance firms, public bodies, IT companies, financial institutions, online advertising platforms and retailers. The group also leverages the firm's wider IT expertise and is a go-to name for matters relating to the data protection aspects of cloud computing operations and digitalisation projects.

Mannheimer Swartling is a prominent name in the field of data protection and privacy under the leadership of corporate sustainability and risk management group head Erica Wiking Häger. Alongside advice on the full scope of GDPR compliance work including implementation strategies and policy work, the team also assists multinational clients with cross-border data sharing and cybersecurity issues, breach prevention strategies, data processing agreements and matters relating to the use of facial recognition techniques. Clients regularly originate in regulated sectors including the financial services and telecoms industries; other key sectors include the healthcare, life sciences, retail, automotive and digital media arenas. Niklas Sjöblom leads the Gothenburg-based team.

Setterwalls is an established name for data privacy and data protection matters and advises a client roster of domestic and international corporates on the full scope of issues. Noteworthy instructions for Fredrik Roos, Jörgen S. Axelsson and specialist counsel Bobi Mitrovic involve privacy matters pertaining to the design and usage of e-commerce platforms and other technology systems. Marcus Svensson is a go-to name for GDPR compliance work for life sciences and medtech clients handling patient data. The team also has expertise in blockchain-related data work.

Peder Oxhammar and associate Jennie Nilsson lead on Baker McKenzie’s data privacy mandates, with noteworthy recent examples involving providing cross-jurisdictional support on implementing clients’ digital services and products, which involve high levels of user data; the team also provides general GDPR regulatory assistance. The diverse client base encompasses names from the retail, automotive, home appliances and healthcare sectors.

An extensive list of corporate clients from the financial services, insurance, construction and medtech sectors instructs Advokatfirman Cederquist KB on a range of data privacy and data protection issues. Practice co-heads Johanna Linder and Malin Allard advise on GDPR implementation projects and ongoing compliance support issues, data processing agreements, data breach responses and the use of user data for marketing and advertising purposes; associate Isabelle Emanuelsson regularly assists with the latter.

Hannes Snellman provides data privacy and protection expertise to clients across the financial services, telecoms, media and public sectors. Practice head Elisabeth Vestin is particularly praised for her analysis of data protection risk related to the procurement of cloud computing, IT systems and e-commerce platforms. The team also handles the full scope of GDPR assistance from implementing compliance programmes to reviewing internal policies and procedures.

Roschier’s data protection practice counts notable IT, media, technology and telecoms clients on its roster. The group is headed up by Björn Johansson Heigis and handles large-scale GDPR programmes and provides ongoing support on data breaches, data processing agreements and audits. A number of senior associates including Johan Gerhardsson, Hanna Tilus and Emmy Petterson assist across all mandates including M&A and outsourcing transactions involving sensitive customer data.

At Advokatfirman Vinge, Henrik Borna is co-head of the TMT practice and advises on GDPR implementation and compliance issues and the processing of personal data. Fellow co-head Eva Fredrikson is a key name for commercial agreements, and Nicklas Thorgerzon, who co-manages the data privacy and data protection practice with Emelie Svensäter Jerntorp, handles data privacy projects for domestic and international clients. The team has recently advised clients from the telecoms, publishing, media, financial, security, retail and technology sectors.

Data privacy mandates for Bird & Bird’s clients are handled by commercial practice head Mattias Lindberg, who recently joined from Affärsadvokaterna i Sverige AB to expand the firm's expertise. The team is handling GDPR compliance projects, data processing agreements and cross-border data sharing issues for clients in cutting-edge sectors including the fintech, medtech and life sciences industries. As an integrated offering with the firm's corporate and commercial practice, the group also routinely advises on data privacy issues arising from M&A transactions.