In connection with personal data processing, the GDPR sets requirements regarding appropriate technical and organisational measures to ensure a security level that is appropriate in relation to the risk. In order to secure integrity and confidentiality, Statistics Sweden only delivers data in MONA without personally identifiable information fieldspersonally identifiable information fields personally identifiable information fields. For example, personal identity numbers are replaced by serial numbers prior to delivery. Personal data processing is limited to users who have been approved by the recipient.

Even though directly identifying data is not released, the released data is nevertheless considered to be personal data and must be treated as such. The recipient shall ensure that the information is not disseminated to unauthorised parties and may not, without approved assessment pursuant to the Public Access to Information and Secrecy Act, be used by other organisations or for other purposes. MONA is a solution that ensures such processing.

You must agree to the terms and conditions of use

In order to gain access to information in MONA, the terms of use must be approved. It is in the interest of both Statistics Sweden and the recipient that the information in MONA be processed in accordance with the terms of use. The terms of use stipulate for example from where MONA may be used. It is only permitted to use MONA in countries within the EU or EEA, or third countries approved for transfer by the European Commission.

Adequacy decisions | European Commission (europa.eu)

Login details

Login details are personal and may not be disclosed to anyone else. Login requires BankID or a one-time password that is created by an app in the user’s smartphone. The app requires a password which the MONA users must regularly change themselves, the new password must follow the requirements stipulated in MONA’s password policy.