General Data Protection Regulation (GDPR) - student

Through the General Data Protection Regulation, the data subject has several rights that are intended to strengthen the protection of personal privacy and the position vis-à-vis the one who processes personal data. Everyone whose personal information is registered is entitled to receive clear information about the processing and the right to know what information is being processed (answers to such a request may not take more than one month, but this period may be extended to three if the process of obtaining the data is complicated). It is also usually free of charge to obtain the requested information. The data subject also has the right to have incorrect information corrected without unnecessary delay and the right to have personal information deleted or the processing of it terminated if it is used longer than necessary and otherwise not subject to legal requirements such as the rules for handling public documents or processing for research purposes in the public interest.

The data subject is also entitled to receive his/her information digitally so that, for example, he/she can switch a service to another without losing information. Finally, the data subject always has the right to complain to the Integritetsskyddsmyndigheten, which then investigates and determines any administrative fines.