Can information be disclosed according to the GDPR / Data Protection Act? - Knowledgebase / Legal - Support Portal | Registry Services

Can information be disclosed according to the GDPR / Data Protection Act?

Updated 29 Apr, 2020

• Personal data may only be disclosed under certain specific conditions. Among other things, personal data can be disclosed if one of the following conditions is met: 

• The data subject has given consent to the disclosure of the personal data for one or more specific purposes. 

• The disclosure is necessary to fulfill a legal obligation (for example, law, regulation, government decision or collective agreement). 

• The disclosure is necessary for purposes relating to a legitimate interest of the registrar, the person requesting it, or another third party and the data subject's interests or fundamental rights and freedoms do not weigh heavier (balance of interests). 

If the information is disclosed, it is important that as few personal data as possible be disclosed. Thus, some form of data minimization is required. For more information about the disclosure of personal data, see The Swedish Internet Foundation's document "Information for The Swedish Internet Foundation's registrars on disclosure of personal data", which is published on The Swedish Internet Foundation's website for registrars.