Skip to content
Privacy and rights vis-à-vis authorities 2026 — what has changed?
Privacy & data protection10 min read

Privacy and rights vis-à-vis authorities 2026 — what has changed?

Contents

This guide is informational. Always verify how the rules apply to your specific case.

Why a 2026 update?

In recent years, rules and practices have changed in several areas that affect the privacy of private individuals and their ability to defend themselves in proceedings against authorities. This article is a practical overview (not legal advice).

Quick summary

  • Camera surveillance: from May 1, 2025, the licensing obligation was removed and law enforcement agencies were given expanded capabilities — more responsibility lies on documentation, proportionality and information.
  • Data protection/IMY: from 1 May 2025, the possibility of receiving notification in certain complaints was strengthened if the processing takes time.
  • Social services: from 1 July 2025, a new Social Services Act applies with a greater focus on prevention and accessibility.
  • Government information: from December 1, 2025, there will be a new privacy-breaking provision that will make it easier for authorities to share data in order to prevent crime, cheating and regulatory violations.
  • Police and AI: the government proposes that from July 1, 2026, police should be able to use AI for real-time facial recognition in certain serious crime situations.
  • Practical protection: document, request documents, keep everything in writing, and use the right “tools” (review/appeal, JO, IMY).

1) Camera surveillance — new rules from May 1, 2025

A major change is that permission from IMY is no longer the main model. Instead, the observer must be able to demonstrate that the surveillance is lawful, proportionate and documented. At the same time, for law enforcement agencies, the possibilities of camera surveillance have been expanded, including in places where there is a risk of serious

crime.

What does that mean to you? In more situations, you may need to ask for clear information: who is monitoring, why, how long material is stored and how to request information about you.

2) Data protection — when oversight/complaints drag on

If you complain about a processing of personal data (e.g. incorrect registration or excessive dissemination), IMY is central. From 2025, rules were introduced to prevent certain complaints from being left unreported.

What does that mean to you? If your privacy issue gets stuck, you can often benefit greatly from working with traceability: written requests, diary numbers, and clear dates.

3) Social Services — new Social Services Act from 1 July 2025

A new Social Services Act came into force on 1 July 2025 with a clearer focus on prevention, accessibility and knowledge-based interventions. The Government also urges that reports of concern should become digitally searchable for easier follow-up and that children's rights and participation should be strengthened.

What does that mean to you? In practice, contacts and interventions can take place earlier — making early documentation (what was said, what was requested, what was decided) even more important

.

4) More information sharing between authorities

From December 1, 2025, a new non-disclosure provision will apply that will make it easier for authorities, municipalities, regions and certain private actors covered by the Public Information and Privacy Act to share data to prevent, prevent, detect or investigate crimes, improper payments, fraud and regulatory violations. Before disclosing information, a balance of interests must be made and certain confidentiality

is excluded.
  • Government press release: New privacy-breaking provision from December 1, 2025
  • What does that mean to you? When multiple authorities refer to each other's data, it becomes even more important to request documents, verify the source and request correction if the same error spreads further.

    5) Police, AI and facial recognition 2026

    The government is proposing a new law that will allow police to use real-time facial recognition AI systems in certain situations linked to serious crime, missing persons and the enforcement of sentences. According to the proposal, use should be proportionate and require permission from prosecutors or courts, with a special order for urgent cases

    .

    What does that mean to you? The development makes questions about records, misstatements, logs, purposes and rectification more practical. If a government action appears to be based on unclear information, request a written notification of the information used, as far as confidentiality permits.

    6) More coercive means and more data-driven work (development)

    There is a long-term development in which law enforcement agencies are given more tools and where digital traces play a greater role. At the same time, there are requirements for proportionality, legal certainty and control. If you fall into an authority process: work methodically with documents

    and timeline.

    How to strengthen your position (regardless of authority)

    1. Request documents early: see what the decision is actually based on.
    2. Make everything traceable: emails, diary numbers, dates, and a simple timeline.
    3. Document meetings: own notes and (where you attend) recording + transcribing.
    4. Keep track apart: (A) case/appeal, (B) response/delay (JO), (C) integrity (IMY).
    5. Write briefly and concretely: statement of claim → grounds → evidence.
    div class="bg-emerald-50 border-l-4 border-emerald-500 p-6 my-8 rounded-r-xl">

    💡 Tipbox: Lesser-Known Rights 2026

    • IMY's new deadlines: In case of complaints about the processing of personal data, you have the right to be informed about the processing time. Remind in writing if it drags on time
    • . Documentation
    • obligation of the camera guard: The person watching must have a documented balance of interests. Ask for it in writing — it may show flaws
    • .
    • Separate tracks: Use different journal numbers or referrals for privacy complaints (IMY) and procedural errors (JOs) to avoid mixing them up.
    • Principle of proportionality: the measures taken by the authorities shall be proportionate. Use this argument in JO filings and appeals.
    /div >

    For those who read under stress

    The guide is meant as support when you already have a lot around your head. You don't have to read everything at once: start with the section that matches where you stand today and come back when the next step becomes relevant

    .

    Affairs with authorities are rarely made better by the fact that you carry everything alone. Ask for help from a support person, lawyer or family member if you can — especially before decisions that

    have a long impact.

    Common mistakes that make the case more difficult

    • Trust only verbal promises without brief written acknowledgement or follow-up emails.
    • Wait to request documents until the conflict is already locked -- then it will be heavier to show what was said.
    • Write so long and emotionally driven that the authority stops answering the factual question.
    • Miss deadlines for reconsideration or appeal because the decision was not read verbatim.

    Mini-checklist before leaving the guide

    1. Do I have the date, diary/case number and name of the person handling the case (if you know)?
    2. Do I know what the next step is: reply, request out, recall, appeal or report?
    3. Have I saved emails and attachments in a place where I can find them in a week?

    Extra guide: Where should I turn? Guide to Trial Courts and Notifications

    Related articles

    Continue reading

    View all articles