Is Doxxing Legal in Sweden After the 2026 Law Changes?

No.

Doxxing—publishing private or identifying information without consent—is illegal in Sweden under multiple statutes, including the Fundamental Law on Freedom of Expression (1991:1469) and the Penal Code (Brottsbalken 1962:700). The Swedish Authority for Privacy Protection (IMY) enforces compliance, while the 2026 Digital Services Act (DSA) transposition tightens platform liability for facilitating such acts. Violations may result in fines or imprisonment up to two years, depending on intent and harm caused.

Key Regulations for Doxxing in Sweden

  • Penal Code (Brottsbalken 4:6) – Criminalizes unlawful disclosure of personal data with intent to harm, punishable by up to two years’ imprisonment. Applies even if the data is publicly available but republished maliciously.
  • General Data Protection Regulation (GDPR) & Swedish Data Protection Act (2018:218) – Mandates strict consent requirements for processing personal data. The IMY actively investigates unauthorized doxxing cases, particularly under Article 82 GDPR, allowing victims to claim damages.
  • Fundamental Law on Freedom of Expression (1991:1469) – Prohibits doxxing as an abuse of free speech, especially when targeting individuals for harassment or incitement to violence. The Chancellor of Justice (Justitiekanslern) monitors compliance with constitutional limits.