Sweden is turning EU AI and cybersecurity rules into operational duties, with PTS leading AI Act supervision and MSB launching NIS2 incident reporting from 1 July.

Sweden‍

AI Act

PTS received central responsibilities under Sweden’s AI Act implementation. PTS said on 16 June that it will act as a national competent authority, market-surveillance authority for certain prohibited and high-risk AI uses, the common contact point, and the body establishing a national regulatory sandbox.

NIS2MSB announced that incident reporting under Sweden’s cybersäkerhetslag implementing NIS2 will start on 1 July 2026. In its 18 June public briefing notice, MSB said the new reporting duty will begin under recently adopted regulations and used the webinar to brief organisations on both reporting and the transfer of cyber operations to the National Cyber Security Centre.

‍