Processing of personal data is mainly regulated in the Swedish Personal Data Act. It is probably true to say that the broad definition of “processing” and “personal data” in this law means that practically every company is subject to the Personal Data Act. This may relate to the company’s processing of the personal data of its own employees, customers or suppliers. There has also been increased interest after a number of occurrences in the U.S. for establishing what are known as whistle-blowing systems. At Fylgia, we have solid experience of advising clients in matters relating to processing personal data.