AI Regulation Tracker / Law in force

Sweden Switches On Police Real-Time Facial Recognition Under EU AI Act Article 5

Regulatory summary: Sweden's Riksdag approved prop. 2025/26:150 on May 26, 2026, letting the Police Authority run real-time facial recognition in narrow cases such as trafficking, kidnapping, missing persons feared harmed, and imminent threats to life. Grounded in EU AI Act Article 5, it enters into force July 1, 2026.

The Riksdag cleared live remote biometric identification for the Police Authority in a handful of narrow, court-gated scenarios.

Primary source

By Anthony Guerriero, Founder, The Leveraged Years · Reviewed by The Leveraged Years Editorial Desk · Published July 9, 2026 · Last updated July 9, 2026

Sweden Switches On Police Real-Time Facial Recognition Under EU AI Act Article 5 regulation briefing

The Leveraged Years AI Regulation Tracker

Key takeaways

Sweden created an explicit legal basis for police live facial recognition where none existed, using the AI Act's law-enforcement exception to the general real-time RBI prohibition. Deployment now turns on prosecutor or court authorization plus a proportionality and necessity test.
Privacy and data-protection counsel, DPOs, compliance officers, biometrics and AI vendors, and criminal-defense and civil-liberties attorneys, plus supervisory-facing teams tracking Article 5 implementation across the EU.
Status: In force July 1, 2026.
Track the enabling statute's exact triggers, the prosecutor/court authorization workflow, the 24-hour retroactive-approval mechanism, and supervision by Integritetsskyddsmyndigheten (IMY); map any RBI or biometric offering against these conditions before asserting Article 5 cover.

Regulatory Briefing

Bindingness: Binding national law (in force)
Scope: Swedish Police Authority use of real-time remote biometric identification (live facial recognition) in public spaces, limited to statutory triggers: suspected victims of trafficking, kidnapping or exploitation; missing persons feared to be crime victims; imminent threats of serious violence to life or safety; and identifying or locating suspects or convicts tied to crimes carrying at least four years imprisonment.
What Changed: Sweden created an explicit legal basis for police live facial recognition where none existed, using the AI Act's law-enforcement exception to the general real-time RBI prohibition. Deployment now turns on prosecutor or court authorization plus a proportionality and necessity test.
Who This Affects: Privacy and data-protection counsel, DPOs, compliance officers, biometrics and AI vendors, and criminal-defense and civil-liberties attorneys, plus supervisory-facing teams tracking Article 5 implementation across the EU.
Current Status: In force July 1, 2026
Effective Date: July 1, 2026
Primary Source: https://www.riksdagen.se/sv/dokument-och-lagar/dokument/betankande/polisens-anvandning-av-ai-for-ansiktsigenkanning-i_hd01juu28/
Secondary Analysis: https://www.regeringen.se/rattsliga-dokument/proposition/2026/03/prop.-202526150
Workflow Impact: This is the first concrete national template for how a government reads AI Act Article 5's real-time RBI exception, defines the qualifying purposes, and wires in judicial authorization, so it becomes a reference point for compliance arguments, vendor procurement, and rights challenges elsewhere.
Operational Next Step: Track the enabling statute's exact triggers, the prosecutor/court authorization workflow, the 24-hour retroactive-approval mechanism, and supervision by Integritetsskyddsmyndigheten (IMY); map any RBI or biometric offering against these conditions before asserting Article 5 cover.
Last Verified: July 9, 2026

Date	Jurisdiction	Rule	Affected professionals	Status or effective date
2026-07-09	Sweden	Sweden created an explicit legal basis for police live facial recognition where none existed, using the AI Act's law-enforcement exception to the general real-time RBI prohibition. Deployment now turns on prosecutor or court authorization plus a proportionality and necessity test.	Privacy and data-protection counsel, DPOs, compliance officers, biometrics and AI vendors, and criminal-defense and civil-liberties attorneys, plus supervisory-facing teams tracking Article 5 implementation across the EU.	In force July 1, 2026

Frequently Asked Questions

Did Sweden legalize general real-time facial recognition surveillance?

No. The law authorizes real-time facial recognition only when absolutely necessary in a closed list of situations, such as trafficking, kidnapping or exploitation victims, missing persons feared to be crime victims, imminent threats to life, and serious offenders, and it requires prosecutor or court authorization plus a proportionality test.

What is the legal basis under EU law?

The measure operates under the EU AI Act. Article 5 generally prohibits real-time remote biometric identification in public spaces for law enforcement, but allows member states to permit it for a limited set of serious-crime objectives under conditions and safeguards. Sweden built its national law inside that exception.

When does the law take effect?

The law and accompanying amendments enter into force on July 1, 2026. The Riksdag approved the underlying proposition, prop. 2025/26:150, on May 26, 2026, following committee report bet. 2025/26:JuU28.

What is the 24-hour rule?

In urgent cases, police may begin using real-time facial recognition without prior approval, but they must apply for authorization within 24 hours. It is a retroactive-approval mechanism for time-critical scenarios, and it is one of the most scrutinized parts of the framework.

Who supervises police use of this technology?

Integritetsskyddsmyndigheten (IMY), Sweden's data protection authority, is designated as the supervisory authority. Authorization for individual deployments must come from a prosecutor or a court.