Public Services > Central Government

Sweden to strengthen public sector outsourcing rules

Matteo Natalucci Published 03 August 2017

Introduction of a new Security Protection Act will set tighter restrictions and security requirements for government's IT system outsourcing

Swedish Prime Minister Stefan Lofven has announced the government's plans to tighten existing public sector outsourcing regulations and limit the kind of information that can be shared.

It follows the political fallout from the recent security breach which saw the resignation of two Swedish government ministers.

Lofven  confirmed  his government’s intentions to safeguard sensitive data and minimise the damages done by an IT outsourcing contract that could have exposed classified details to foreign agents.

Lofven recognises that the outsourcing of data management operations provides an increased security risk. Hence, he announces a change in the public sector outsourcing regulation.

He proposes the introduction of a new Security Protection Act (SOU 2015: 25) that will set stricter restrictions and security requirements for government's IT system outsourcing. The legislation will apply to public sector's non-confidential data as well.

The act is expected to be introduced by 22 February 2018.

The National Post and Telecom Agency (PTS) will develop a data management tool that will handle the sensitive data it currently manages. PTS aims to create an insourcing process able to guarantee both the confidentiality and security of the sensitive ICT data operations executed.

The Swedish Security Service will also report to the government about any public sector related data-security risk and incident, with a focus on outsourcing.

Sweden will also launch a further investigation to review the Transport Agency's outsourcing deal which allegedly led to the data breach.

To date, the security breach has already resulted in the resignation of two ministers, the Minister of the Interior and the Minister of Infrastructure.

Related Article 

Swedish Cabinet reshuffled in wake of IT security row

We have updated our privacy policy. In the latest update it explains what cookies are and how we use them on our site. To learn more about cookies and their benefits, please view our privacy policy. Please be aware that parts of this site will not function correctly if you disable cookies. By continuing to use this site, you consent to our use of cookies in accordance with our privacy policy unless you have disabled them.