EU law
The GDPR and other relevant EU legal sources form the common foundation. Source identity and version are kept visible so that legal requirements are not confused with guidance.
- Regulation (EU) 2016/679
- Official EUR-Lex sources
- Traceable requirement versions
Swedish laws
Swedish supplementary legislation is maintained as a distinct source layer and connected to the requirements and activities it affects.
- National supplementary provisions
- Clear separation from the GDPR core
- Context for Swedish organisations
Supervisory guidance
Guidance and operational material from IMY and relevant European bodies add practical context without being presented as legislation.
- Swedish supervisory guidance
- European data protection guidance
- Source type remains visible
The organisation's own knowledge
Policies, decisions, responsibilities, systems, processors, controls and evidence become a reusable knowledge base rather than scattered files.
- Verified facts reused across workflows
- History, ownership and review dates
- Evidence linked to the relevant requirement
Guidance where the work happens
Contextual help explains purpose, preparation, steps and completion criteria directly inside the relevant Privelos workflow.
- Less searching in separate manuals
- Direct path from knowledge to action
- Legal decisions remain with authorised people
A living knowledge structure
When sources, organisational facts or evidence change, Privelos makes the resulting review work visible through gaps, actions and due dates.
- Source → requirement → control → evidence
- Owned follow-up instead of passive reading
- Structured material for review and audit