In addition to sector-specific legislation on the management of personal data, the General Data Protection Regulation, GDPR, contains general rules on the management of personal data. The GDPR is supplemented by the Act (2018:218) with supplementary provisions to the EU data protection regulation, the Data Protection Act.