The Swedish data protection authority, Integritetsskyddsmyndigheten (IMY), has referred to the European Data Protection Board (EDPB) to obtain clarification on the scope of Article 10 of the GDPR concerning data on criminal offenses.

This initiative, started in December 2025 as part of a review of the authority's legal position, specifically aims to determine whether the protection offered by Article 10 extends to data concerning offenses for which no judicial proceedings have been initiated. The IMY has observed divergences in interpretation and application of this provision among European Union Member States, following public consultations and exchanges with its counterparts. The objective is to achieve a harmonized interpretation to ensure an equivalent level of personal data protection throughout the Union's territory. The EDPB has a period of eight weeks, extendable by six weeks, to issue its opinion.