Can information be disclosed according to the GDPR / Data Protection Act? - Knowledgebase / Legal - Support Portal | Registry Services

Can information be disclosed according to the GDPR / Data Protection Act?

Updated 20 Apr, 2020

Personal data may only be disclosed under certain specific conditions. Among other things, personal data can be disclosed if one of the following conditions is met: 

  • The data subject has given consent to the disclosure of the personal data for one or more specific purposes. 
  • The disclosure is necessary to fulfill a legal obligation (for example, law, regulation, government decision or collective agreement). 
  • The disclosure is necessary for purposes relating to a legitimate interest of the registrar, the person requesting it, or another third party and the data subject's interests or fundamental rights and freedoms do not weigh heavier (balance of interests). 

If the information is disclosed, it is important that as few personal data as possible be disclosed. Thus, some form of data minimization is required. 

See also General information for The Swedish Internet Foundation’s registrars regarding disclosure of personal data