News · Transport · Published 11 July 2026
Transport operators face new duty to report security-sensitive arrangements
Organisations supervised by the Swedish Transport Agency must report certain ongoing arrangements from 1 January 2027.
DailySweden Editorial Desk
Updated 00:37 · 3 min read
Listen to this articleNarrated - 9:12
%2002.jpg?width=1600)
Some organisations supervised by the Swedish Transport Agency will have to report ongoing arrangements that expose security-sensitive information or activities under a new provision in Sweden's Security Protection Act.
The reporting duty was introduced on 1 July 2026. The authority says it must be fulfilled without delay from 1 January 2027, giving affected operators a clear deadline to identify arrangements that fall within the rule.
The duty applies when an ongoing arrangement allows another party to access security-classified information at the confidential level or higher, or other security-sensitive activities of comparable importance to Sweden's security.
Organisations supervised by the Swedish Transport Agency must report certain ongoing arrangements from 1 January 2027.
It covers arrangements that were not subject to the requirement to enter a security-protection agreement when they began. The rule is therefore aimed in part at older or changed relationships that may sit outside the agreement duties introduced under the current legal framework.
Transport essentials
The Transport Agency gives two examples. The first is an arrangement begun before December 2021, when the present regulation took effect. This includes arrangements covered by security-protection agreements made under earlier provisions of the law.
The second is an arrangement begun after 1 December 2021 but before the relevant activity became security-sensitive.
What happens now
Operators for which the Transport Agency is the supervisory authority must submit the notification to the agency. A dedicated form, titled Notification of certain arrangements, is available through the authority's security-protection pages.
The practical consequence is that affected organisations need to review ongoing contracts, collaborations or other procedures rather than considering only new arrangements. The decisive questions are whether another party gains access to protected information or activity, and whether the arrangement was already covered by the statutory agreement requirement when it started.
The authority's notice does not say that every external relationship must be reported. It describes a narrower category involving information classified as confidential or higher, or activity of equivalent importance to national security.
Because the duty must be met without delay from the start of 2027, organisations within the agency's supervision have less than six months to assess their arrangements and prepare any required notifications.
The new reporting requirement provides the Transport Agency with visibility into security-sensitive exposure that may not have been captured by earlier agreement rules. Affected operators should use the agency's form for qualifying arrangements.
DailySweden Editorial Desk
Original DailySweden guide desk. We write practical Sweden explainers for newcomers and update them when official guidance changes.
Contact the editorial desk ›
