Sweden’s New e-ID Law

New rules for electronic identification in Sweden enter into force on 1 December 2026.

The law introduces new requirements for public actors offering online services that require e-ID, including recognition of e-IDs available through Sweden’s Authorisation System.

Find out if your organisation is affected and how to prepare.

A New Framework for E-ID in Sweden

The Act (2026:1358) introduces a new state-issued Swedish e-ID and new requirements for e-ID in public digital services.

The law applies to government authorities as well as certain publicly funded and privately operated organisations. Together, these are defined as public actors.

For public actors, the key requirement is that online services requiring electronic identification must accept all e-IDs available through the Authorisation System that meet the required assurance level. However, this does not require that the e-ID is procured via the Authorisation system.

Are You Affected?

Government Agencies

State authorities providing digital services to individuals are covered by the law.

Municipalities and Regions

Municipalities, regions and their authorities are also included when they provide affected online services.

Privately Operated, Publicly Funded Services

The law also covers privately operated organisations carrying out publicly funded activities in areas such as healthcare, dental care, schools, social services and personal assistance.

Certain Higher Education Providers

Some privately operated higher education providers that are primarily funded through government grants are also included.

What Is Changing?

Currently, public actors may pick and choose which e-ID solutions are supported on their platforms except for government agencies who are required to support all e-IDs in the Authorisation System since 1 January 2026.

From 1 December 2026

Public actors must accept e-IDs provided through an Authorisation System under the Authorisation Systems Act when their assurance level is equal to or higher than that required for access to the service.

This creates a common legal framework for how e-ID solutions are recognised in affected public digital services.

What Does Your Organisation Need to Do?

Preparing for the new requirements starts with understanding which services are affected and how electronic identification is handled today.

1. Determine Whether the Law Applies to You

Establish whether your organisation falls within the definition of a public actor under the new law.

Then identify which of your online services are wholly or partly intended for individuals and require electronic identification.

2. Review Your e-ID Requirements

For each affected service, identify which e-IDs are currently offered and the required assurance level. Then determine which additional e-IDs meet that level.

Under the new law, e-IDs that meet or exceed the required assurance level must be accepted.

3. Check the Authorisation System

DIGG lists all the e-IDs that are part of the Authorisation System and this constitutes the list of the e-IDs you need to support.

There is however no obligation to obtain the e-IDs via the Authorisation System.

4. Review Your Technical Integration

Assess whether your current authentication setup can support these requirements, including your: identity infrastructure, authentication flows, technical connections, agreements and integration models.

Existing shared infrastructure may allow parts of the current setup to be reused.

Freja Is One of the Required eID Solutions

Freja eID Sweden AB is an approved supplier within the Authorisation System for Electronic Identification, with Freja+ available through the system since 1 January 2026.

This means that Freja+ is one of the e-IDs you need to support if the law applies to you.

What Are the Benefits of This

Contribute to Digital Inclusion

Today almost 1 million individuals are excluded from our digital society because the eID they used are not supported everywhere.

Include Foreign Users

Adding Freja also means that you can include users from 180+ countries in your e-services

Increase Your Resilience

Having more than one eID in your e-services ensures access if one of them has a service interruption

Meet the Regulatory Requirements

Above meeting the obvious law requirement a more redundant eID-setup also helps meet compliance around NIS and other regulations.

Prepare for the New Requirements

The new rules enter into force on 1 December 2026.

If your organisation is affected, our team can help you understand what the changes mean for your e-ID setup.

Plan Your Next Steps with Our Team

Talk to us