.png)
EU
DSA
EU Commision designated ChatGPT as a VLOSE and Reddit and Roblox as VLOPs under the DSA after each exceeded the 45 million monthly EU user threshold. The services now have four months, until January 2027, to meet enhanced DSA obligations on systemic risk assesments, mitigation, transparency, recommender systems, fundamental rights, elections and public security.
Sweden
GDPR
IMY launched FantomAPP for children aged 10-15 to strengthen privacy and personal-data protection on social media with tools for privacy settings, passwords, image blurring, fake profiles, bullying and fraud.
The app originated with the French data protection authority CNIL, which developed it together with young people after research indidicated insufficien understanding of data-protection rights. IMY translated and adapted it for Sweden and the project received EU funding. IMY explicitly links the initiative to the GDPR's stronger protection of children's personal data.
Read More
AI Act
IMY announced two AI projects entering its GDPR innovation sandbox, focusing on AI-assisted decision-making, sensitive data, humab oversight, cybersecurity and privacy-by-design.
The first project involves Lund Municipality, Helsingborg City and Notana Care AB, which want to develop AI agents for municipal healthcare and social-care services.
The second project involves Telge Bostadär AB, which wants to use AU to aggregate information and improve the housing-rental process so caseworkers can make decisions more efficiently and applicants can receive faster responses.
