Camera Surveillance Rules 2026: Permits, Signage and GDPR

Last updated: September 2026

Video surveillance is legal in Sweden, but which rules apply depends on who you are and what the camera captures. The biggest change in recent years came on 1 April 2025: the permit requirement was abolished entirely. Today no one needs to apply for a permit from the Swedish Authority for Privacy Protection (IMY) – but that does not mean all surveillance is allowed. Responsibility has moved from the authority to you, the person setting up the cameras.

Here we go through what applies to private individuals, housing associations (BRF) and businesses. This article is a general overview and does not replace legal advice.

Short answer: do you need a permit for video surveillance in 2026?

No. Since 1 April 2025 there is no requirement for a permit from IMY, for private individuals, businesses or public authorities. Instead, whoever operates the cameras must assess for themselves that the surveillance complies with the Camera Surveillance Act and GDPR – and be able to show this if IMY reviews the surveillance afterwards.

Which laws govern video surveillance?

Two sets of rules are central:

  • The Camera Surveillance Act (2018:1200) – the Swedish law on camera surveillance, which supplements GDPR.
  • GDPR (General Data Protection Regulation) – applies because images in which people or, for example, licence plates can be identified count as personal data.

For private individuals there is an important exception, the so-called household exemption, which we describe below.

What changed on 1 April 2025?

Even before, most private companies, shops, housing associations and private individuals did not need a permit. The permit requirement mainly applied to public authorities, municipalities and others performing tasks in the public interest. From 1 April 2025 that requirement was also removed. Instead:

  • those who previously required a permit must carry out a documented balancing of interests and keep a record of their surveillance before it starts,
  • organisations planning particularly privacy-sensitive surveillance may still need to consult IMY before they begin,
  • IMY reviews surveillance afterwards rather than in advance.

For most homeowners and businesses the practical conclusion is the same: no permit, but good documentation and correctly installed cameras.

Video surveillance as a private individual and homeowner

If you monitor your own home for purely private use, the household exemption normally applies. The surveillance is then covered by neither GDPR nor the Camera Surveillance Act. However, the exemption is interpreted narrowly and only applies as long as the camera stays within your own private sphere.

Things to keep in mind:

  • Point the cameras at your own property. The street, pavement, footpath and your neighbour's property or windows should not be in view. If needed, use the camera's privacy masking function to black out parts of the image.
  • A camera in an apartment door or stairwell often captures neighbours and passers-by – then GDPR and the Camera Surveillance Act apply, not the household exemption.
  • Do not publish the footage. If you post clips on social media, it is no longer private use.
  • Be careful with audio. Recording sound is a greater intrusion than images and should generally be switched off outdoors.

If the surveillance falls outside the household exemption, you become a data controller under GDPR, with the same kind of requirements as a business. Read more in our guide to video surveillance for homes.

Housing associations and landlords

A housing association or landlord that installs cameras in stairwells, entrances, garages or refuse rooms is always covered by GDPR and the Camera Surveillance Act. The association is the data controller and must be able to show that the surveillance is needed – for example because of burglaries or vandalism – and that less intrusive measures are not enough. Document what has happened, limit the surveillance to the places and times where it is needed, and inform the residents.

Video surveillance for businesses and shops

The household exemption never applies to businesses. As an organisation you need:

  • A legal basis – for private companies usually legitimate interest (Article 6(1)(f) GDPR).
  • A documented balancing of interests – why the surveillance is needed, which places and times it covers, and why other measures are not enough.
  • Clear signage at the monitored areas.
  • Limited storage and routines for who may view the footage.
  • Routines for access requests – anyone who has been filmed has the right to request information.
  • Secure handling – protected logins, updated software and a correctly configured network.

Read more about how we build systems for offices, shops and warehouses on the page video surveillance for businesses.

Cameras in the workplace

Surveillance that captures employees is especially sensitive. The purpose must be security – for example protection against robbery, theft or vandalism – not checking how staff do their work. Employees must be informed in advance, and the employer may have a duty to negotiate under the Co-Determination in the Workplace Act (MBL). Cameras in areas such as staff rooms, changing rooms and toilets are in practice almost never justifiable, and covert surveillance of employees is in the vast majority of cases not permitted.

Signage – what should it say?

When the surveillance is covered by GDPR and the Camera Surveillance Act, people being filmed must be informed, usually with a sign at the monitored area. The sign should be easy to see and should state:

  • that camera surveillance is in progress,
  • who is responsible for the surveillance and how to contact them,
  • whether audio is recorded,
  • where to find more information, for example about retention periods and your rights.

Private individuals who stay within the household exemption have no signage requirement, but a sign can still have a deterrent effect.

How long may recorded footage be kept?

There is no fixed limit in the law. The basic rule is that footage may not be kept longer than necessary for its purpose. In practice a few days is usually given as a reasonable starting point, so that an incident has time to be discovered. If you want to keep footage longer, you should be able to justify why. With an NVR the retention period can be set so that older footage is deleted automatically.

What happens if you break the rules?

IMY can impose administrative fines and in some cases prohibit the surveillance. For serious breaches of GDPR, fines can reach EUR 20 million or 4% of global annual turnover. Since prior review has been removed, your own documentation is the best protection if the surveillance is questioned.

Summary: what applies in practice?

Situation Permit? What applies
Private individual, camera pointed at own property No Household exemption – keep neighbours and street out of view
Private individual, camera captures street, neighbour or stairwell No GDPR and the Camera Surveillance Act apply – rarely permitted
Housing association or landlord No GDPR, balancing of interests, signage
Business and shop No GDPR, documented balancing of interests, signage, limited storage
Surveillance that captures employees No As above + information to staff, possibly MBL negotiation
Public authority, municipality or region No (since 1 April 2025) Documented balancing of interests, record, possibly consultation with IMY

The table is a simplified overview. Always check current guidance from IMY for your situation.

How Ensec helps you get it right

A lawful camera system starts with the right planning. When we install video surveillance we help you with camera placement, masking of areas that must not be filmed, setting the retention period and advice on signage. We have completed 100+ installations and installation starts from SEK 1,495.

Frequently asked questions about video surveillance rules

Do you need a permit for video surveillance in Sweden?

No. Since 1 April 2025 no one needs to apply for a permit from IMY. However, whoever operates the cameras must ensure that the surveillance complies with the Camera Surveillance Act and GDPR.

Can I have video surveillance at my house?

Yes. If you point the cameras at your own property and use the footage privately, the household exemption normally applies. The street, pavement and your neighbour's property should not be in view.

Can you film your neighbour's property?

No. The household exemption then no longer applies and the surveillance is generally not permitted. Use masking or re-angle the camera.

Do you have to put up video surveillance signs?

Businesses, associations and private individuals whose surveillance is covered by GDPR must inform people, usually with a sign. Private individuals within the household exemption have no signage requirement.

How long may recordings be kept?

No longer than necessary. A few days is usually given as a starting point, and longer storage should be justifiable.

Can businesses monitor their employees with cameras?

Only if the purpose is security and the surveillance is proportionate. Staff must be informed and the employer may need to negotiate under MBL. Covert surveillance is generally not permitted.

This article is a general information overview and does not replace legal advice. For guidance on your specific situation, contact IMY or a lawyer.

Back to blog