After receiving a written request for microdata, Statistics Sweden conducts a confidentiality assessment, where the request is reviewed against requirements of the Public Access to Information and Secrecy Act and other legislation. Once the confidentiality assessment has been approved, the requested information is provided in the form of microdata. The recipient is responsible for disclosed information; see more here:

Division of responsibilities

It is up to the recipient to protect the data from unauthorised access and prevent dissemination. To simplify this, Statistics Sweden offers the MONA platform, where microdata provided by Statistics Sweden can be processed together with data from other sources in a restricted and secure environment with two-factor login. Each user must accept the MONA Terms of Use before accessing data.

Terms of Use

If the recipient is an authority, the following applies:

• The data may be used for the purpose which was stated by the authority in the request and included in the confidentiality assessment conducted by Statistics Sweden. If the data is to be used for another purpose, the authority must carry out its own confidentiality assessment according to the rules in the Public Access to Information and Secrecy Act and the General Data Protection Regulation (GDPR).
• The authority decides which employees within its own organisation may have access to the data.
• If persons outside the authority are to have access to data in MONA for the same purpose, these persons must be linked to the authority as if they were employees.
• If the information is to be released to another organisation, the authority must carry out its own confidentiality assessment. In cases where the microdata is released to another organisation, MONA can only be used in special cases

If the recipient is a private organisation, the following applies:

• The data may only be used for the purpose for which it was requested.
• The data may only be used by the employees with whom Statistics Sweden has signed a secrecy clause at the recipient organisation. Violation of the secrecy clause is punishable under Chapter 20, Section 3 of the Swedish Penal Code as it constitutes a breach of the duty of confidentiality/secrecy.
• The data may only be used until the date specified in the secrecy clause, after which it will be deleted in MONA
• The data must not be passed on to any other person at your own or any other organisation.