Advokatfirman Cederquist KB’s group offers a comprehensive service covering GDPR compliance, data processing in the context of AML checks, and data privacy assessments. Johanna Linder
’s varied IT practice encompasses information security and data protection matters, including those concerning personal data processing. Henrik Lindstrand’s recent highlights include GDPR compliance and data privacy assessment mandates. The two lead the department alongside tech and telecoms expert Malin Allard. Associate Antonia Carlsson also plays a key role in the team, advising on GDPR compliance and data transfer agreements amongst other issues.
Data privacy and data protection in Sweden
Advokatfirman Cederquist KB
Practice head(s):
Johanna Linder; Malin Allard; Henrik Lindstrand
Other key lawyers:
Antonia Carlsson; Daniel Eriksson
Testimonials
‘Henrik Lindstrand’s vast knowledge, particularly in IT law and data protection, combined with his customer-centric approach, truly sets him apart. He is incredibly results-oriented, always ensuring that client outcomes are prioritised while maintaining exceptional attention to legal detail. His proactive communication style, technical savvy, and commercial acumen make him a standout partner.’
‘The entire team consists of extremely competent lawyers on every level. Henrik Lindstrand has an exceptional ability to understand the challenges our business faces. Moreover, Antonia Carlsson is probably one of the best data privacy associates on the Swedish market with an unmatched knowledge of the legal landscape within data privacy and data protection.’
‘Henrik Lindstrand is very professional, competent, customer-centric and down-to-earth. Antonia Carlsson is competent, professional, responsive and solution-oriented.’
‘Cederquist’s team stands out for its deep expertise in complex regulatory frameworks and tech-driven industries. Their ability to blend legal precision with an understanding of business objectives makes them uniquely positioned to guide clients through GDPR compliance and broader privacy concerns.’
‘They have a good team approach where they appear to discuss the issues and challenge each other. It is very valuable as a client to know that they have spent some time discussing a particular item before advising me. The entire team feels very present.’
‘The team has a practical approach to data protection matters, while at the same time providing high-quality legal advice based on applicable legislation and authority guidelines and practices. It is always a pleasure working with the team!’
‘They have a practical approach and understanding of sector-specific details and practices.’
‘The team is exceptionally skilled. They provide pragmatic and business-oriented advice and are able to transfer legal requirements into hands-on advice that is helpful to the business. The team also provides innovative solutions to ensure that facilitates compliance within our entire organisation.’
Key clients
Skandinaviska Enskilda Banken (SEB)
Acast AB
PostNord AB
Billerud Aktiebolag
Föreningen Svensk Elitfotboll
Truesec Group AB
Mips AB
Addnode Group Aktiebolag
Telenor Connexion
Camfil AB
Lumera AB
SJ AB
Skandia Fastigheter AB
Svensk Adressändring AB
AFRY AB
Föreningen Svenskt Näringsliv
ITAB Shop Concept AB
Work highlights
- Assisted the financial crime prevention team of the major Swedish bank SEB in several matters regarding legitimate use of personal data for anti-money laundering purposes, and illegitimate use within organized crime of personal data from public databases enjoying constitutional protection.
- Advised Föreningen Svensk Elitfotboll in various data protection related issues, in particular in relation to customer data and marketing, including in setting up new arrangements, routines and documentation.
- Assisted Telenor Connexion with their project to develop IoT solutions, including carrying out risk assessments, advising on strategies on how to address privacy issues and customer inquiries, as well as drafting contracts (including DPA) related to the IoT project.
Cirio Advokatbyrå AB
Cirio Advokatbyrå AB’s practice head Caroline Olstedt Carlström is ‘exceptionally strong in every aspect’ and has over 20 years of experience advising on Swedish and international data privacy and protection matters in the IT, media, telecoms, energy, finance, e-commerce, and healthcare sectors, amongst others. Her experience encompasses international data transfers, regulatory compliance, and product development. David Frydlinger’s outsourcing projects expertise includes data protection matters. IP specialist Hanna Tilus is also a key contact with notable experience in the life sciences sector. Managing associate Josefine Lundström and senior associate Ina Laurell also play key roles in the team.
Practice head(s):
Caroline Olstedt Carlström
Other key lawyers:
David Frydlinger; Hanna Tilus; Ina Laurell; Josefine Lundström; Jessica Sondell
Testimonials
‘Caroline Olstedt Carlström has extensive expertise and experience and provides practical and commercial advice aligned with best practice that is easy to implement and use in-house.’
‘Josephine Lunström is very proactive with her responses. Her advice is clear with great attention-to-detail.’
‘Caroline Olstedt Carlström has a very reliable outlook on balancing legal risk with business risk.’
‘Jessica Sondell has good competence in data privacy. She is always engaged and available.’
‘Caroline Olstedt Carlström is exceptionally strong in every aspect and, as part of this, creates a strong team around her. Her team delivers high-quality and business-relevant work product, promptly and efficiently. Her level of availability is also high.’
‘Caroline Olstedt Carlström is exceptionally strong in every aspect of delivering external counsel partnering. I will even say that she is the strongest and most complete external counsel we work with, and this includes partners from the major US, UK and EU firms.’
‘The team offers reliable guidance on difficult issues.’
‘Cirio are highly efficient in producing timely and thorough advice. Their recommendations on strategy are well-rounded, take into account all factors relevant to the client and specifically address the points raised by the client.’
Key clients
Verisure
Securitas Direct
Meta
Telia Company
LG Electronics
Åhléns
Swedish Police Authority
ICA Group
Swedfund International
Tibber
Fortnox
Nepa AB
Föreningen Svensk Värdepappersmarknad
Hypertype AB
Teracom
Meliva AB
Dustin Group
Collectum
Sveriges Tidskrifter
Vasakronan
Work highlights
- Assigned as external Data Protection Officer for the Nordic and Baltic regulated Nasdaq entities, acting also as contact person for the supervisory authorities and providing regular and specific advice in a number of different data privacy related matters.
- Assigned as external Data Protection Officer for Dustin, acting also as contact person for the supervisory authorities and providing regular and specific advice in a number of different data privacy related matters.
- Advised the Swedish Securities Markets Association and its members on data sharing practices, assessments of data protection roles etc in their relation to the Securities Register Center.
Advokatfirman Delphi
Advokatfirman Delphi remains a firm of choice for major data protection and data privacy matters; recent highlights for the group include advising the Swedish FA on data privacy issues relating to the use of surveillance cameras in the vicinity of sporting arenas. Gothenburg-based Johan Engdahl regularly assists major Swedish companies with data privacy and protection matters. Engdahl leads the team alongside Peter Nordbeck in Stockholm, who advises on cross-border data transfer agreements and GDPR compliance as well as with data protection litigation. Agnes Hammarstrand handles data privacy matters in the IT and e-commerce sectors, amongst others, having recently advised on personal data processing in the context of the digital onboarding of insurance companies.
Practice head(s):
Johan Engdahl; Peter Nordbeck
Other key lawyers:
Agnes Hammarstrand; Emilia Malmberg Larson
Testimonials
‘Agnes Hammarstrand is highly skilled and available with strong capabilities in providing commercially reasonable and risk-based advice.’
‘An easygoing team with especially good pedagogical abilities. They are good to consult on complex legal matters. I work with Agnes Hammarstrand and Emilia Malmberg Larson especially.’
‘A very competent team, with many individual lawyers holding high standards. It is clear that they are working as a team to build competence across the team. Also, they are good at guiding us on good practice and commercially reasonable measures from a risk perspective and have their ear to the ground both with regards to the supervising authorities and case law across Europe.’
‘This practice stands out for its specialised expertise, client-centred approach, and forward-thinking innovations. Potential clients would likely appreciate the team’s deep knowledge in the field.’
‘The individuals I work with stand out due to their exceptional expertise, dedication, and ability to deliver tailored solutions.’
‘They have very deep knowledge and orientation within this field. The people are very easy going and they seem to include diversity as an important area.’
Key clients
Svenska Fotbollförbundet
Supersejf AB
Länsförsäkringar i Göteborg och Bohuslän AB
Swedish Church
Foodora AB
JUC Sverige AB
RISMA Systems Sweden AB
Volvo Car Retail Solutions AB
The Swedish Exhibition & Congress Center
MindArk PE Aktiebolag
Work highlights
- Advising the Swedish Football Association regarding the sharing of camera surveillance material between the different parties involved from a data protection perspective.
- Advising the insurance start-up Supersejf AB with data protection compliance in their automated onboarding process in an app signing up for insurances.
- Advising Länsförsäkringar regarding the legal requirements for processing personal data, especially concerning criminal offences, in relation to background checks to fulfil opposing regulations from governmental authorities.
Advokatfirman Kahn Pedersen KB
Advokatfirman Kahn Pedersen KB’s practice offers broad data protection and data privacy assistance to clients in the context of cybersecurity, public procurement, IP and data strategy, and digitalisation initiatives, amongst other areas. The team stands out particularly for its work on data protection matters relating to cloud services as well as for its advising public authorities on GDPR compliance. It also advises on Swedish Public Access to Information and Secrecy Act-related issues. Practice head Johan Kahn is active in the financial and industrial sectors. Daniel Lundqvist’s varied client roster includes banks, payment services providers, energy and utility companies, industrials, and trade unions. Senior specialist Martin Brinnen has advised government authorities and parliamentary committees on the wide range of data protection law issues. Tahmina Sahibli and senior associate Hanna Bogsjö Österberg are also key contacts.
Practice head(s):
Johan Kahn
Other key lawyers:
Daniel Lundqvist; Martin Brinnen; Tahmina Sahibli; Hanna Bogsjö Österberg; Viktor Robertsson
Testimonials
‘Viktor Robertsson is extremely skilled within his field and will go above and beyond in his efforts to map and explain territory for you as a client. He is straightforward and highly available, with commendable integrity and skill.’
‘The team has high seniority and consists of very capable individuals. Johan Kahn is clearly the one to go to when it comes to difficult matters if you want commercially, legally sensible and creative advice and I would consider him as most likely the number one practitioner in Sweden. Daniel Lundqvist and Tahmina Sahibli are also among the very best and always deliver great advice.’
‘Martin Brinnen is the most respected senior data protection expert in Sweden and is almost always part of the advisory team, bringing priceless experience to the table.’
‘I would say without any hesitation that Kahn Pedersen is one of the absolute best and most qualified in field of data privacy and data protection. KP has helped our municipality-owned energy corporation with the legal set up of every aspect of our security-sensitive activities.’
‘Kahn Pedersen is considered as probably the top practice for data protection in Sweden, and I agree.’
‘What sets the firm apart from the rest is that they have an actual data protection team, not only one or two experts.’
‘Apart from providing excellent advice on the interpretation of laws and regulations, they always suggests a solution and a way forward. They are very familiar with the financial sector which contributes to their balanced and creative advice. In addition to being an exceptionally good advisor, they are also pioneers in the sense that they address structural challenges before any other firm would even notice.’
‘Kahn Pedersen addressed the challenge with US cloud services in relation to the GDPR many years ago and also presented creative solutions on how to deal with it which gave their clients the opportunity to make well-informed strategical decisions, which shows their pioneering capabilities.’
Key clients
Länsförsäkringar Group
Getswish AB
Svenska Handelsbanken AB
Svenskt Näringsliv
SJ AB
AFA Försäkring tjänstepensionsaktiebolag
Nordic Capital
Akelius Residential Property AB
NOBA Bank Group
Myndigheten för tillgängliga medier
Work highlights
- Advised Handelsbanken on legal assessments of cloud services from a data protection perspective, as well as large data protection projects to follow up GDPR-implementation and previously concluded data protection agreements.
- Advising Getswish on cloud strategy and GDPR compliance.
- Advised the Swedish Agency for Accessible Media on public secrecy act and GDPR, as well as on cooperation with other Nordic government authorities.
Mannheimer Swartling
Mannheimer Swartling remains at the forefront of developments in the field of data privacy, with a strong reputation for handling investigations by the Swedish Authority for Privacy Protection as well as expertise encompassing personal data processing, data breaches, AI, and facial recognition tech. Recent highlights for the group include advising a major Swedish industrial manufacturing company in connection with a large-scale ransomware data breach. Practice head Erica Wiking Häger has more than 20 years of experience handling compliance and contentious matters and is especially active in the retail, financial services, tech, and auto sectors. Anders Bergsten’s broad IT and tech practice has seen him recently advise several generative AI companies on privacy issues. IT procurement specialists Niklas Sjöblom and Martin Hallström are also key contacts.
Practice head(s):
Erica Wiking Häger
Other key lawyers:
Anders Bergsten; Niklas Sjöblom; Martin Hallström; Ängla Pändel; Tova Winsten
Testimonials
‘Anders Bergsten possesses outstanding communication skills and can explain intricate legal concepts in a clear and concise manner, ensuring that clients are always informed and confident in their legal decisions. Their professionalism and integrity have earned him the trust and respect of both clients and colleagues. Moreover, he is a natural leader and team player.’
‘I wholeheartedly endorse Anders Bergsten for any legal position or endeavour. His dedication, expertise and ethical standards make him a tremendous asset to any project.’
‘Erica Wiking Häger, Ängla Pändel and Tova Winsten have excellent knowledge within data privacy and data protection and understand the need for commercial aspects as well.’
‘The team stands out for its expertise and specialisation, boasting a small team of highly qualified attorneys with specialisation in various fields of law. This enables them to provide expert advice and representation across a broad spectrum of legal issues.’
‘The team has a client-centric approach, prioritising their clients’ needs, offering personalised services and maintaining open, transparent communication. They build strong relationships by listening to their clients, understanding their objectives, and tailoring strategies to achieve the best outcomes.’
‘The team demonstrates continuous learning and innovation, providing ongoing education and training for their attorneys to stay abreast of the latest legal developments and technological advancements. They embrace innovation to improve efficiency and service delivery.’
‘The law firm excels in legal expertise, client service, ethical practice, and contributes positively to the legal profession and society.’
‘The team has excellent knowledge within data privacy and data protection and collaborates well.’
Key clients
Klarna Bank
Spotify
Northvolt
SAS (Scandinavian Airlines)
Bonnier Group
Loomis
Castellum
Novamedia
ATG
Capio S:t Görans Hospital
Region Västra Götaland
Kindred
Kia Sweden
Leya AI
Work highlights
- Advising Klarna Bank on the appeal of an administrative fine imposed on Klarna by the Swedish Authority for Privacy Protection for alleged deficiencies in Klarna’s privacy notice.
- Advising Capio S:t Görans Hospital, an emergency hospital, on the appeal of an administrative fine imposed on Capio S:t Görans by the Swedish Authority for Privacy Protection for alleged infringements of the GDPR.
- Advising a major Swedish industrial manufacturing company in connection with a large-scale ransomware data breach which affected the client’s entire production and administration environment.
Setterwalls
Setterwalls is trusted by major domestic and international clients to handle a wide range of data protection and data privacy matters, including those concerning data breaches and personal data processing, as well as cybersecurity issues. Fredrik Roos in Gothenburg is noted particularly for his expertise in relation to new tech and digital services, including machine learning, AI, automation and open source software. Stockholm-based Niklas Follin’s varied experience encompasses data use rights, information security and data protection incident response-related matters. Sophia Spala, also in Stockholm, has a strong track-record in SaaS, social media, digital advertising, and digital health issues. The three partners jointly lead the practice, with Joacim Johannesson a key player when it comes to fintech and financial services-related work.
Practice head(s):
Fredrik Roos; Niklas Follin; Sophia Spala
Other key lawyers:
Joacim Johannesson; Elin Ipsonius
Testimonials
‘Niklas Follin is fast, sharp and has the ability to both see the big picture and the details at the same time. This, in combination with the understanding of our business in general and IT in particular, is really valuable.’
‘Elin Ipsonius also shines as a skilled legal counsel. Her unwavering focus on client support, attention-to-detail, and problem-solving abilities make her a standout. She consistently ensures that client objectives are met efficiently and effectively, delivering precise solutions.’
‘Niklas Follin has been an especially great individual to work with. He ensures our asks get prioritised, the work he delivers is excellent, and he’s flexible in adjusting to ours and our clients’ schedules.’
‘The team at Setterwalls stands out for their blend of legal expertise and strategic thinking, focusing on comprehensive solutions that achieve the best outcomes for clients. Joacim Johannesson exemplifies this approach with his broad competence in corporate law, international investments, shareholder agreements, ESOPs and much more.’
‘What truly sets Joacim and the team apart is their ability to work seamlessly across borders and specialties, providing practical, proactive solutions in even the most complex scenarios. Their dedication, responsiveness, and legal acumen have been invaluable to our success as a client.’
‘The team at Setterwalls stands out as one of the most exceptional and forward-thinking legal practices in the industry. Their commitment to client service is second-to-none, delivering a combination of deep legal expertise, personalised attention, and an unwavering dedication to achieving the best outcomes.’
‘Potential clients will find that this team excels in collaboration, seamlessly integrating resources from multiple practice areas to offer comprehensive and innovative legal strategies. Their ability to adapt quickly to new challenges, combined with a deep understanding of both the local and international legal landscapes, gives clients the confidence they need when navigating complex matters.’
‘Overall, Setterwalls combines unmatched legal acumen with a collaborative and forward-looking approach, placing them at the forefront of innovation and client service in the legal industry. Clients can trust that they will receive the highest quality legal counsel, delivered with integrity, agility, and an unwavering commitment to excellence.’
edpLaw
edpLaw continues to advise clients on a wide range of data privacy and data protection issues, including personal data processing, GDPR, e-privacy, and surveillance. Johan Sundberg’s years of experience have seen him advise on a broad range of issues, including international data transfers, sanctions screening, the impact of foreign surveillance laws, and GDPR. He leads the practice alongside Johan Thörn whose experience encompasses data processing impact assessments, data sharing agreements, and privacy management. Senior associate Fredrik Eråker provides key support on GDPR and data sharing.
Practice head(s):
Johan Sundberg; Johan Thörn
Other key lawyers:
Fredrik Eråker
Testimonials
‘Fredrik Eråker is very approachable and has a good sense of the client’s needs and an understanding of their businesses. He is quick, thorough and easy to work with. Today, Fredrik is a vital part of our exciting growth journey.’
‘Johan Sundberg is my reliable local counsel for all privacy and data protection matters in Sweden. His expertise in local regulations, along with his strong relationships with supervisory authorities, makes him an essential partner. Johan’s ability to move from high-level strategic advice, interweaving the relevant commercial and legal aspects, to efficient hands-on execution makes him unique.’
‘Johan Sundberg and Johan Thörn are both very skilled.’
‘Johan Thörn and Fredrik Eråker work great together and are a tight and great team. They provide a great service together and are able to deliver great service at a great price. Associate Fredrik Eråker is exceptional; knowledgeable, pragmatic and consistently deliver excellent work with a great understanding of the business needs. He is a pleasure to work with and highly personable.’
‘Johan Thörn is great, with a super deep knowledge of the space.’
‘The team is business-oriented and recognises customer needs and adapts advice accordingly. The collaboration always works smoothly with quick responses.’
‘A small, focused firm specialising in a few areas. Deep knowledge both within the area but also with regards to how to understand and treat customers.’
‘The team is outstanding in the data privacy field. They act as advisers in the true sense of the word – giving pragmatic and practical guidance while never compromising the legal precision.’
Key clients
Swedish Equality Ombudsman
Sellhelp AB
Swedavia
NOBA Bank Group AB
Swedbank AB
Skandia AB
ICA Gruppen AB
Advania Sverige AB
Afa Försäkring
Santander Consumer Bank AS
UC AB
Länsförsäkringar AB
ASSA ABLOY AB
ASSA ABLOY OPENING SOLUTIONS AB
Ragn-Sellsföretagen AB
Floatel International
Vimian Group
Svensk Fastighetsförmedling AB
Dottir Attorneys
Cooley LLP
BNP Paribas bank
Viaplay group
Securitas AB
Avonova Hälsa AB
Strömma Turism & Sjöfart AB
Treyd Services AB
Mentimeter AB
ADDvise Group AB
Work highlights
- Advised and represented NOBA Bank Group in a court litigation involving GDPR claims by a former customer of the bank, successfully.
- Advising Vimian group on a number of international matters, including risk assessments, data sharing questions, and more.
- Advised Sopra Steria Sweden AB on various data protection matters.
Snellman
Snellman’s data, privacy, and cybersecurity practice has broad competence covering data privacy matters in the telecoms, health tech, and financial services sectors, amongst others. Practice head Caroline Sundberg has notable experience in the field, with particular strengths advising financial institutions and telecoms operators on privacy matters. Senior associate Jessica Tressfeldt has experience advising on transfer impact assessments and commercial data protection as well as data issues in M&A transactions generally.
Practice head(s):
Caroline Sundberg
Other key lawyers:
Jessica Tressfeldt
Testimonials
‘What truly sets them apart from competitors is their collaborative approach and commitment to understanding the unique needs of each client. Partners like Caroline Sundberg have been instrumental in ensuring that our organisation stays ahead of industry trends and regulatory updates, offering insights that are both strategic and actionable. Their ability to simplify complex data protection requirements into clear, concise advice has proven essential to our success in navigating global privacy laws.’
‘Snellman’s data privacy and data protection practice is truly exceptional and stands out in several key areas. Their unique approach combines in-depth regulatory expertise with practical, business-focused solutions, ensuring clients not only achieve compliance but also gain a competitive advantage. The team’s extensive knowledge of global regulations, such as GDPR, CCPA, and other international data protection laws, ensures that clients are always ahead of the curve in a constantly evolving legal landscape.’
‘One of the standout strengths of the team is their ability to deliver tailored, strategic solutions that are both comprehensive and easy to implement. Their deep understanding of risk management, data governance, and breach response sets them apart, offering clients peace of mind with a proactive, end-to-end service. Potential clients will appreciate the team’s responsiveness, technical knowhow, and ability to break down complex issues into actionable insights.’
‘Compared to other firms, Snellman excels in their innovative use of technology, leveraging tools for automated compliance tracking, data mapping, and incident management. This not only improves efficiency but also ensures that clients have access to real-time information and solutions that are future-proofed. Furthermore, their commitment to diversity and inclusion within the team fosters creativity and offers fresh perspectives, resulting in more robust and forward-thinking strategies for clients.’
‘Their collaborative approach, both internally and with clients, ensures that solutions are customised to meet specific business needs, and this partnership-style engagement is a hallmark of their success.’
‘In short, Snellman is a leader in the data privacy and data protection space, delivering innovative, client-focused services with unmatched expertise and professionalism. Their dedication to excellence, combined with a forward-looking approach to both tech and collaboration positions them well ahead of their peers in the industry.’
‘Snellman is home to an exceptional team of individuals who consistently demonstrate a high-level of expertise and dedication in the field. The individuals I’ve had the pleasure of working with stand out for their deep knowledge of complex regulatory frameworks and their ability to deliver practical, business-oriented solutions that go beyond simple compliance. Their capacity to anticipate challenges and provide proactive strategies has been invaluable in safeguarding client interests in an ever-changing landscape.’
‘The qualities I have appreciated most in the team are their professionalism, their proactive communication, and their ability to work seamlessly with both legal and operational stakeholders. Their collaborative spirit fosters an atmosphere of trust and partnership, making it easy to work alongside them. Overall, the individuals at Snellman are not only knowledgeable but also genuinely invested in the success of their clients, making them a true standout in the data privacy and protection space.’
Key clients
Vitamin Well
Seeburger Group
Stockholm Regional Council
Espressohouse
Dustin Group
Kindred Group PLC
Hi3G
DER Touristik Nordic (Apollo travel)
Thule Group AB
Work highlights
- Advised Hi3G Access AB as external DPO, assisting in numerous data privacy related assignments on a daily basis and advising on strategic as well as detailed parts of the client’s data privacy organisation.
- Assisting DER Touristic Nordic (Apollo) in their privacy program, providing guidance on GDPR compliance, including the assessment of data processing activities, updating privacy information, and further establishment of robust data protection measures.
Hellström Law
Hellström Law’s dedicated data protection practice handles a broad spectrum of Swedish and EU data privacy and data protection matters, with an emphasis on GDPR compliance. Practice head Anna Fernqvist Svensson has several decades of experience advising on the variety of issues ranging from personal data processing, to third party transfers, to data protection impact assessments. Karl-Fredrik Björklund is particularly active in the real estate, IT, e-commerce, healthcare, and pharma sectors. Erika Juvander Heveus is noted for advising on data protection in an employment context.
Practice head(s):
Anna Fernqvist Svensson
Other key lawyers:
Karl-Fredrik Björklund; Erika Juvander Heveus
Testimonials
‘Karl-Fredrik Björklund is outstanding in his field and helps the privacy area in the Nordics develop by his dedication to the Swedish Data Protection Forum which works to promote and develop best practice in the area of privacy. He’s also especially strong in the area of healthcare.’
‘We are very pleased with Hellström’s data privacy and data protection practice, particularly with Anna Fernqvist Svensson who we rely on for Swedish matters from time to time. She is always very available, and has a great understanding of the law and the client situation.’
‘Karl-Fredrik Björklund is knowledgeable in GDPR and can guide us in a good way regarding both policies and practical aspects. We also appreciate that he can assist with legal issues outside the GDPR area.’
‘The team has two partners with experience working with data protection and privacy. Karl-Fredrik Björklund is very experienced in litigation work and does a lot of employment law matters, both areas are extremely useful and relevant to many data protection matters. I have worked a lot with Anna Fernquist Svensson and Karl-Fredrik Björklund and they stand out as very experienced.’
‘Karl-Fredrik Björklund has longstanding experience especially from working with data protection (as well as DPO) in the healthcare sector, which is a tricky area.’
‘They are diligent, cost effective and thorough in their approach.’
‘Hellström has a great insight and understanding of data protection law and runs a particularly interesting business in this area, as they have a number of clients whose activities affect several countries. As a result, Hellström has extensive experience of the interaction between several different countries’ data protection rules and deviations from GDPR, and Hellström has effective communication with other foreign lawyers about this in the case handling.’
‘The data privacy team at Hellström is very competent, hands-on and reliable. They work independently and swiftly and produce high-quality legal advice adapted to our needs and the specifics of our operations.’
Key clients
FKP Scorpio Sverige AB
Grifols Nordic AB
Apoteket AB
Lensway Group AB
Omilon AB
Work highlights
- Advises FKP Scorpio on all matters relating to data protection and data privacy.
- Advises Grifols on all matters relating to data protection and data privacy including inter alia records or processing activities, data processing agreements, GDPR training courses, data privacy notices for employees, and whistleblowing issues.
Advokatfirman Lindahl KB
Advokatfirman Lindahl KB’s data protection practice is noted particularly for its experience in the life sciences sector, recently advising on risk assessments, data protection impact assessments, incident management, and GDPR compliance, amongst other issues. Uppsala-based Michael Edquist leads the practice, alongside M&A and IT-outsourcing specialist Gabriel Svedberg. Mårten Lindberg’s broad TMT practice includes considerable data protection experience. With expertise handling commercial agreements in the IT and media sector, Johan Åberg also plays a key role in the team.
Practice head(s):
Gabriel Svedberg; Michael Edquist
Other key lawyers:
Mårten Lindberg; Johan Åberg; Mikael Olsson
Testimonials
‘Working with Mikael Olsson is really a true pleasure. His knowledge of data privacy and data protection is immense and all matters are handled effectively and thoroughly. Mikael Olsson’s communication skills are excellent, both in Swedish as well as in English.’
‘Advokatfirman Lindahl KB provides excellent support for life science companies with their strong knowledge of the applicable regulations. We have always receives phenomenal support related to any data privacy and data protection related question that has occurred.’
‘The team is very knowledgeable in this evolving field, as well as professional.’
‘They are always available, knowledgeable, friendly and professional.’
Key clients
Affibody AB
Philips AB
Esri Group
Amra Medical AB
E.ON Sverige Aktiebolag
Olink Proteomics AB
BHG Group AB
Novare Human Capital AB
Flowbox AB
Bris – Children’s Rights in Society
Neonode Technologies AB
Tataa Biocenter AB
MIND SWEDEN
Valida Due Diligence AB
C-RAD AB
Q-Linea AB
Viedoc Technologies AB
Berling Media AB
Norrenergi AB
Roschier
Roschier’s practice advises leading clients in the telecoms, private equity and banking sectors, amongst others, on a broad range of issues, including GDPR, personal data processing, and disputes. Practice head Björn Johansson Heigis has notable experience advising companies in the media, telecoms, and tech spaces. Björn Hård af Segerstad’s financial regulatory and fintech practice often sees him advise on data protection matters in those fields. Senior associate John Park plays a key role in the team.
Practice head(s):
Björn Johansson Heigis
Other key lawyers:
Björn Hård af Segerstad; John Park
Testimonials
‘John Park’s exceptional responsiveness and expertise makes him a trusted advisor for clients navigating complex legal frameworks. John combines legal knowledge with practical, business-oriented solutions. His approachable and collaborative nature makes him easy to work with, ensuring seamless communication and an overall positive client experience.’
‘Björn Johansson Heigis is an excellent and innovative lawyer who provides actionable advise.’
‘A solid team with a pragmatic and commercial approach.’
‘Roschier’s data protection practice stands out for its truly hands-on approach, ensuring that we as the client are constantly ahead of emerging issues, rather than just reacting to challenges.’
‘The team’s responsiveness is exceptional and assures timely and practical advice. It is also important to mention Roschier’s ability to deliver both global and local perspectives on key data protection matters.’
Key clients
Bookbeat
Ontario Teachers
Hemnet Group
Nordstjernan
Klarna
Advokatfirman Vinge
Advokatfirman Vinge continues to handle a broad range of data privacy and data protection matters, with data breaches and data transfers being key areas for the team. The group continues to advise telecoms company Tele2 in relation to its ongoing dispute with the Swedish Data Protection Authority concerning the transfer of data and cookie identifiers to the US via Google Analytics. Emelie Svensäter Jerntorp in Malmö has personal data compliance expertise,while Stockholm-based Nicklas Thorgerzon handles large-scale GDPR projects for Swedish banks. The two lead the practice alongside Eva Fredriksson who is also in Stockholm.
Practice head(s):
Emelie Svensäter Jerntorp; Nicklas Thorgerzon; Eva Fredriksson
Other key lawyers:
Mathilda Persson; Fredrika Hjelmberg
Testimonials
‘Eva Fredriksson is committed to the practice of securing the best and most risk averse results for the client. She also has the ability to understand business dimensions that drives the client needs, and will do her utmost to see to the result.’
‘Mathilda Persson is appreciated for her great ability to be convey complex items in a way that provides comfort not only to her client but also to counterparts as part of a negotiation. She has strong competence in her areas, and will be a star.’
‘Fredrika Hjelmberg is an up-and-coming lawyer with focus on details and structure.’
‘Emelie Svensäter Jerntorp is a smart lawyer and is not afraid of taking a stand and providing recommendations on ways of handling matters.’
‘Vinge has a vast base of competent experts, with both technical and commercial abilities, thus enabling a focused discussion with clear and unambiguous legal output as a result. Vinge are also focused on understanding how AI will enable its practice.’
‘Their lawyers are competent, easy to work with, available, personal, easy going, and sharp.’
‘The team always makes sure to understand our company and its needs.’
Key clients
Tele2
Star Stable
Work highlights
- Advising Tele2 on various data protection aspects, including in relation to an on-going dispute with the Swedish Data Protection Authority.
- Advised Star Stable on various data protection aspects and has co-ordinated advice for several jurisdictions.
Bird & Bird
Bird & Bird’s commercial group regularly advises on technically complex data privacy and data protection issues; recent highlights include advising on the transfer of health data across open networks. Practice head Mattias Lindberg is noted for his experience advising on personal and patient data processing. At the associate level, Ana-Maria Barbu-Nyström and Julia Jansson play key roles.
Practice head(s):
Mattias Lindberg
Other key lawyers:
Ana-Maria Barbu-Nyström; Julia Jansson
Testimonials
‘Mattias Lindberg is great to work with.’
‘Mattias Lindberg keeps on being one step ahead. His intuitive understanding of what truly matters for a business, combined with his expertise in rules and regulations, makes him the player you want on your team.’
‘The team is knowledgeable, commercial and pragmatic.’
‘The team’s profound expertise in high tech and rules and regulations turns being compliant into a business opportunity.’
Key clients
Kontakta
Synsam Group One AB
AB Svensk Bilprovning
Barry Wehmiller
Work highlights
- Advised Synsam on strategic privacy issues such as data privacy assessments, including on the transfer of health data across open networks.
- Advised Vattenfall on various data privacy projects and matters such as the overhaul and consolidation of Vattenfall’s outward facing Privacy Notices.
- Advised Angelini Pharma Nordics on an overview of its data protection compliance for the Nordic region.
DLA Piper Sweden
DLA Piper Sweden’s team in Stockholm continues to handle a broad range of matters in the financial services, engineering, software, and auto sectors, amongst others, in both a domestic and cross-border contexts. Practice head Jennie Nilsson’s varied experience spans GDPR compliance, data transfers, personal data processing, and transparency obligations. Senior associate Astrid Bohlin plays a key role in the team also.
Practice head(s):
Jennie Nilsson
Other key lawyers:
Astrid Bohlin
Key clients
Pfizer
EQT
AWS
Amazon
Dynamic Code
LIF
Voi Technology
Indivd
BMW
Electrolux
Sandvik
Assa Abloy
ITB-Med
Swedish Ski Association
Haglöfs
ASICS
Heimstaden
Frank Dandy
Doctrin
IPSEN Pharmaceuticals
Work highlights
- Advised Sandvik on cross-border data protection matters.
- Advised Electroluc on several cross-border data protection matters.
- Advised BMW Nordics on several strategic matters.
Eversheds Sutherland
Eversheds Sutherland’s practice in Stockholm is led by Sara Malmgren. The team regularly advises clients ranging from start-ups to multinationals on a broad spectrum of data privacy and data protection issues, including GDPR compliance, data transfers, and personal data processing. Recent highlights for the group include advising on privacy issues concerning the use of AI and machine learning in the context of football data analysis. Torbjörn Lindmark is a key contact.
Practice head(s):
Sara Malmgren
Other key lawyers:
Torbjörn Lindmark
Testimonials
‘Sara Malmgren is our GDPR lawyer. I have been working with lawyers for over 10 years regarding our GDPR approved data collection model using wi-fi for footfall, and Sara really stands out. She is very knowledgeable, fast and efficient and has help us to legally vet clients.’
‘Sara Malmgren is a very competent and experienced lawyer with in-depth knowledge of the IT sector including internet infrastructure. She is very pleasant to deal with, keeps us informed at all stages of the matter and always replies promptly to any queries. We warmly recommend her for any IT queries.’
‘The team utilises its global presence to summarise in-depth knowledge of crucial areas of importance within IT and tech. This creates extra value for us as customers as we cannot ourselves analyse all markets where we have customers.’
‘Eversheds Sutherland has in-depth experience of the IT sector including internet infrastructure matter and we are very happy with its services.’
‘We would highly recommend Eversheds Sutherland’s team and their in-depth knowledge in the data privacy and data protection area. They have both the in-depth knowledge our experts need to rely on and the size we need to put in extra power around critical decisions.’
‘I have been impressed by how efficiently they work across borders between different jurisdictions.’
‘Very knowledgeable and quick to respond.’
Key clients
Veoneer Inc.
3M Group
Acuvi AB
Omda AS
CatalystOne Solutions AB
BumbeeLabs
JonDeTech Sensors AB
American Express
ChargePanel AB
Froda AB
Industrial and Financial Systems, IFS Group
Johnson Matthey AB
Umida Group AB
Aeris Communications AB
Forest X
Iver Sverige AB
Work highlights
- Advising a Swedish software developer and supplier on a data protection impact assessment process regarding a new service with complex privacy implications.
- Advised ChargePanel AB, providing legal assessments and drafting of contracts for the client who is active within the new and technically evolving EV sector.
- Advising a client in drafting and negotiating contracts in a global context related to the development and provision of software used to enable a high-tech audio solution in customer products, including advising on privacy compliance in relation to the technical solution and certain services which forms part of the contracts.
Advokatfirman Fylgia KB
Advokatfirman Fylgia KB’s team has broad experience spanning risk assessment, compliance, data processing agreements, and data transfer impact assessments. Practice head Martin Gynnerstedt advises listed companies, corporations, and tech ventures; Bjorn Karlsson’s IT practice includes GDPR compliance work; and senior associate Linda Mazaheri is also a key contact.
Practice head(s):
Martin Gynnerstedt
Other key lawyers:
Bjorn Karlsson; Linda Mazaheri
Testimonials
‘Martin Gynnerstedt has exceptional knowledge and an ability to predict potential future areas of conflict and argue for a client’s cause when needed.’
‘With Martin’s commitment and availability, we feel very safe and well=guided through the entire process.’
‘Martin Gynnerstedt is extremely knowledgeable and has a commercial understanding.’
‘Martin Gynnerstedt has good business understanding and a low-prestige approach to his clients. He delivers top-tier advice and is available when needed.’
‘The team has a no nonsense style of work and is quick to understand what is required and what the key points are.’
‘A pragmatic and available team.’
Key clients
Kia Sweden AB
Altro Nordic Aktiebolag
ID06 AB
Glow Technology AB
Mavenoid AB
Beijer Byggmaterial Aktiebolag
Svenska Kraftnät
Bring E-commerce & Logistics AB
iBinder AB
DC Training Sweden AB
Work highlights
- Advised ID06 on matters regarding data privacy and data protection in the development of new services.
- Advised Bring E-commerce & Logistics AB in contract negotiations with a major retail chain, in which data privacy and data protection concerns were a strategic part of the negotiations.
- Advised Beijer AB in a review of their privacy notices with a focus on the use of new tech.
Gernandt & Danielsson Advokatbyrå
Gernandt & Danielsson Advokatbyrå offers comprehensive data privacy and data protection advice to clients in the financial services, healthcare, real estate, and IT sectors, amongst others. With experience advising on privacy issues in the financial services and fintech sector, including cloud data storage and AI, financial regulatory lawyer Niclas Rockborn leads the group. Senior associate Astrid Svensson is noted for her cross-border work.
Practice head(s):
Niclas Rockborn
Other key lawyers:
Astrid Svensson
Testimonials
‘The people are exactly what one would want, friendly and to the point.’
‘I’m often short on time with the questions I have and the possibility for the team to swiftly set up a dedicated group within hours is a big part why I use them.’
‘Everybody in the team I have had contact with is dedicated and there is always an expert on a particular subject.’
Key clients
Rusta AB
Smartbox Group Limited
Öhman group
Karnov Group AB
Aermont Capital Real Estate Fund V SVSp
Doxa AB
Serneke Group AB
Nordstjernan
Etac
Carnegie
Work highlights
- Advised Rusta AB in connection with the IPO and listing of the company’s shares on Nasdaq Stockholm, including data protection work related to the IPO.
- Advised Karnov Group in connection with a public offer from Greenoaks and Long Path, including data protection work related to the IPO.
- Advised Aermont in connection with its investment in a joint venture with ALM Equity AB, including data protection work related to the investment.
Magnusson Sweden
Magnusson Sweden’s practice advises on the full range of data privacy and data protection matters, including GDPR compliance, data transfer, and data protection impact assessments. Helena Rönqvist, noted particularly for her experience negotiating contracts involving data regulations and liabilities, leads the team alongside Caroline Landerfors who advises on data protection matters in the financial sector. Associate Vilma Slättegård has experience in the telecoms, med tech, and fintech sectors.
Practice head(s):
Helena Rönqvist; Caroline Landerfors
Other key lawyers:
Vilma Slättegård
Testimonials
‘Caroline Landerfors has both the experience and the personal qualities essential for a truly substantial delivery of legal advice. She dares to be straight-to-the-point and is clear about what type of advice she will be able to give based on the input she has received. This enables us as a client to receive exactly the guidance that we need.’
‘Caroline demonstrated exceptional knowledge, attention-to-detail, and a genuine commitment to our case. She was always available to answer questions, providing clear and actionable advice that made navigating the complex regulations much easier. Her professionalism and friendly demeanour made the entire process both efficient and enjoyable.’
‘We are impressed with the legal team’s expertise and dedication in handling our data privacy needs. Their proactive approach and deep understanding of the subject as well as the nature of our business were invaluable.’
‘They provided clear guidance, ensuring our compliance with all regulations to ensure we are fully protecting our clients’ information.’
Key clients
Fondo Solutions
Nordiska Galleriet
Svalna AB
ManyPets
Inex One
Ebie
The Swedish Construction Federation
Work highlights
- Advising Spotlight Stock Market with legal reviews and other matters in connection with listings of shares on Spotlight Stock Market’s trading facility, including advice in relation to data protection and data privacy in connection with due diligence work.
- Advising the Swedish FinTech and open savings platform company Fondo Solutions on GDPR issues such as data processing agreements and providing strategic advice on data protection perspectives for their business model.
- Representing the Swedish company Svalna concerning the privacy set-up in Svalna’s sustainability app.
MAQS Advokatbyrå
MAQS Advokatbyrå’s practice offers broad expertise covering risk assessments, third party transfers, and GDPR compliance, amongst other issues. The team is also noted for advising clients on the data privacy implications of AI use and integration. With considerable experience in data processing agreements, compliance reviews, and privacy impact assessments, Karin Schurmann leads the team alongside Anna Eidvall, whose varied practice encompasses privacy notices and third-country data transfers.
Practice head(s):
Karin Schurmann; Anna Eidvall
Key clients
Zimpler AB
Epidemic Sound AB
Zenseact AB
DF Kompetens AB
Dina Försäkring AB
IFI Institutet för informationsteknologi
Kognic AB
Kognity AB
Zmarta Holding AB
HomeQ Technologies AB
FemClinic AB
Aktiebolaget Svensk Varubelåning
]Finbits AB
Ånge Fastighets- och Industri AB
Folkspel
Zeekr Sweden AB
Min Pension i Sverige AB
Ahlsell Sverige AB
Ahlsell AB
Livförsäkringsbolaget Skandia, ömsesidigt
Livewrapped AB
AB Lindex
Work highlights
- Advised Min Pension i Sverige AB in updating MinPension’s privacy notice for MinPension’s all external stakeholders, including customers and end-users.
- Advised the client as an external data protection officer.
- Advised the client in supporting in the initiation of building up Finbits AB’s data governance and data protection documentation.
Norelid Advokatbyrå
Norelid Advokatbyrå’s data protection and cyber security team regularly advises on data protection, GDPR compliance, and data breach matters, amongst others. With considerable experience assisting clients with compliance matters as well as with incident responses to data and cyber security breaches, firm founder and managing partner Susanna Norelid leads the team. Associate Marie Segerholm plays a key role in the cyber incident response team.
Practice head(s):
Susanna Norelid
Other key lawyers:
Marie Segerholm
Testimonials
‘Marie Segerholm’s reviews and documentation were always impeccable and focused on the requests. Marie has certainly demonstrated a high level of privacy and cybersecurity knowledge and has always been instrumental in ensuring that the required tasks are completed on time.’
‘We have worked closely with Susanna Norelid, the head of the firm. Susanna is one of the best experts in the field that we have come across in our work and has always amazed us with her ability to stay one step ahead of most firms in the field at the European level.’
‘Susanna is extremely clear, direct and effective in both communication and organisation, and has proven to be an excellent leader in managing complex projects and crisis situations. Moreover, even when she was not in charge of projects, she was always responsive and present for her colleagues and clients.’
Key clients
Trygghetsrådet TRS
SOKstiftelsen
Signature Litigation
Adlaw International
Pressa Sverige
Modular Finance
Privacy Rules
Insicon
Clyde & Co
Riisa
Protector Försäkring
Mediafy
Venor
Mediehuset Kvartal
Human IT
Sciber
Timelex
Work highlights
- Continuously advising Trygghetsrådet TRS/SOKstiftelsen on matters relating to data protection and GDPR compliance for the entire organisation.
- Advising as incident manager on a national cyber incident.
- Advised Protector Försäkring on compliance and contractual issues regarding personal data protection and data transfers to and from Swedish governmental agencies.
Synch Advokat AB
Synch Advokat AB’s team handles domestic and regional matters in the IT, telecoms, retail, financial services, and healthcare sectors, amongst others. The group’s expertise covers data processing agreements, data protection impact assessments, breaches, and transfer agreements. Karolina Pekkari leads the team. Jim Runsten is a key contact, while at the associate level Elisavet Dravalou, Josefin Riklund and Marcus Appeltofft play key roles.
Practice head(s):
Karolina Pekkari
Other key lawyers:
Jim Runsten; Elisavet Dravalou; Josefin Riklund; Marcus Appeltofft
Testimonials
‘Karolina Pekkari and her associates at Synch Advokat AB are very skilled and offer excellent engagement and expertise. They are very easy to cooperate with and quick to respond with relevant answers for our business.’
‘Marcus Appeltofft is easy to work with and always keen on understanding the purpose of a piece of advice to better tailor it to our practical needs.’
‘Karolina Pekkari and Marcus Appeltofft are fast and reliable and very knowledgeable in their field. They are very easy to cooperate with and quick to respond with relevant answers.’
Key clients
Boliden AB
Brick Advokat AB
Capgemini Sverige AB
ClimateView AB
Helo AB
Industrial and Financial Systems AB (IFS)
Insurely AB
Media Family AB
Scream Mediabyrå AB
Hear Mediabyrå AB
MedMera Bank AB
NOYB
Panasonic
Sky law
Softronic AB
Sogeti Sverige AB
Truesec Group AB
Volumental AB
Voxo AB
Work highlights
- Advising Capgemini on various data protection matters.
- Providing holistic data protection legal advice to Insurely, including the performance of risk assessments, covering all aspects of the business, both external and internal.
- Assisting NOYB with a cross-border survey on national procedures, as well as acting on behalf of the organization in connection with a litigation against IMY all the way up to the Supreme Administrative Court.
TIME DANOWSKY Advokatbyrå AB
TIME DANOWSKY Advokatbyrå AB offers broad data privacy and data protection expertise as part of its practice, with the team advising on GDPR compliance, information security, data protection impact assessments and camera surveillance issues. Practice head Jonas Forzelius regularly advises clients in both the public and private sectors on data protection matters. Ulrika Geissler and Fredrik Ståhl play key roles in the team.
Practice head(s):
Jonas Forzelius
Other key lawyers:
Ulrika Geissler; Fredrik Ståhl
Key clients
Telenor Sverige AB
TM & Partners
TM & Partners practice advises on a broad spectrum of data privacy and data protection matters, with notable strengths in M&A-related data protection as well as in the financial services and healthcare sectors. Practice head Fredrik Gustafsson has considerable experience advising industrials, real estate companies, fintech companies, banks, and healthcare providers on a broad range of issues, particularly the data protection aspects of cross-border deals. Karolina Kjellberg is a key contact.
Practice head(s):
Fredrik Gustafsson
Other key lawyers:
Karolina Kjellberg; Ludvig Tidhult
Testimonials
‘Fredrik Gustafsson is the leading lawyer who delivers excellently. Fredrik’s work has always been of the highest level. He manages advanced negotiation situations with calm and precise advice. We have used his services for several years for our biggest and most complex IT & telecom agreements.’
‘After working with many large multinational companies for more than 20 years I can give him my very best recommendation.’
‘Our key contact Karolina Kjellberg has been the anchor in our joint work. Karolina was effectively our full legal counsel for several activities relating to letters of intent, framework agreements, complicated statements of works and numerous specific dealings. Karolina has been a strong team-player to ensure closure of the agreement process.’
‘The team brings knowledge about GDPR and other related regulations.’
‘The individuals are what makes the team. Fredrik is always easy to get hold of and besides being an excellent lawyer he’s also a really nice guy.’
‘The team blends excellent skills and knowledge with a familiar approach. They are just very nice people that are easy to deal with that also happen to be very good at giving legal advice.’
‘A very knowledgeable team and overall easy to work with. No issues in collaborating effectively.’
‘The team is always available and provides an excellent and fast service. They have good knowledge and always give good advice. Their collaboration within negotiation situations with suppliers is very smooth and effective.’
Key clients
Coala-Life Group AB (publ)
CombinedX AB (publ)
Hillebrand Gori Group GmbH
LRF Samköp AB
Norvestor Equity
Plint
Priveq Investment
Team Olivia
Vivesto AB (publ)
Work highlights
- Advised the Procuritas portfolio company Team Olivia AB on all data privacy and data protection aspects of the sale of its Swedish care division, including the operations within Individual & Family and Home Care business, to Attendo.
- Advising LRF Samköp AB, an affiliate of the Swedish farmers’ association on data privacy and data protection matters.
- Advised Hillebrand Gori Group GmbH on all data privacy and data protection aspects of divesting its Swedish warehousing and distribution business for alcoholic beverages to Skanlog.