This guide is informational. Always verify how the rules apply to your specific case.
Short answer: A government employee is normally only allowed to enter records when necessary for an actual job. Searching someone for no reason — out of curiosity, for a friend, or for private purposes — could be a data breach. This applies to police, social services, healthcare and other record holders.
The problem is that you rarely get to know it right away. Therefore, this guide is about signs, method and what you can do when the suspicion arises
.What is illegal registration?
Data logging is when someone with technical access searches for personal data in a system. It is allowed when necessary for the performance of duties. It is illegal when the search takes place without such a need — for example, for private curiosity, on behalf of an acquaintance or to check relatives without
a case connection.The Supreme Court has held in NJA 2014 p. 221 that police who search systems despite not being needed for the job can be convicted of data breach. Permission to log in is not enough
.Signs that something may be wrong
- You find out data that the authority “should” have been ignorant of without your consent.
- A case officer will refer to information that was never mentioned in your case.
- You suspect someone outside the authority knows details from police, social services or medical records.
- You have been in sheltered accommodation or privacy-marked matter and information is leaking anyway.
- The authority cannot explain the legal basis on which a task is based.
Signs are not evidence -- but they are grounds for requesting logs and writing.
Police records
The police system contains, among other things, personal data, vehicle details, incident reports and reconnaissance records. Single cases such as the Skaraborgs case 2026 show how private ordering of strokes can be detected through anomalous log patterns — but many illegal searches are detected
late or never by the individual.You can request a record extract where the law gives the right to it and ask if incident investigation has been made. Also read about police reconnaissance records and integrity against
authorities in 2026.Social services and care
Social services have similar problems. An employee can be convicted of reading medical records without authority, and municipalities have fired staff after massive reading into other people's cases. In healthcare, the Patient Data Act and logging of access apply
.Section 10 of the Act (2001:454) requires limited authority, documentation and systematic control of unauthorized access within social services.
What you can do — step by step
- Write a timeline with dates, who said what, and what data was leaked.
- Request logs and register extracts in writing — see requesting government documents.
- Ask if incident investigation has been done and ask for the record number.
- Report to IMY in case of personal data breach and to JO in case of mismanagement by authorities — see JO notification.
- Consider reporting to the police in case of serious suspicion of a data breach.
- Ask for rectification if incorrect information was disseminated internally — see Correct incorrect information.
FAQS
How do I know if someone broke records about me?
You rarely get to know it right away. Request logs, records extracts and a written description of the systems used in your case
Is it a crime if a cop hit in private?
Yes, it can be a data breach even without the data being disseminated further.
Can social workers read anything? The
No. Access should be limited to what is needed for the current task.
What happens if the authority denies logs?
Ask for a written decision and consider the JO, IMY or request for party review in accordance with applicable rules.
