Region Örebo county Region Örebo county

Handling of Personal Data

Personal data is data that directly or indirectly can identify a natural person, for example a name, personal identity number or address. In Region Örebro County, large volumes of personal data is processed in sectors such as healthcare, research, county traffic and folk high schools. Personal data relating to employees and elected representatives is also processed.

The EU General Data Protection Regulation (GDPR) prohibits any handling of personal data unless allowed by law. The processing of personal data thus requires a legal basis. The legal bases for the processing of personal data in Region Örebro County are:

  • if the processing of personal data is necessary in order to fulfil an agreement with the data subject
  • to fulfil a legal obligation
  • to protect the basic interests of the data subject
  • to carry out a task of general interest or as part of the data controller’s exercise of official authority
  • consent.

Region Örebro County (regional board) is responsible for all processing of personal data. The data controller determines the purpose and the means for the processing.

The data controller is also obliged to ensure that a list is maintained of all personal data processing that takes place in Region Örebro County. When new personal data processing is started or concluded, this should be documented in a special system.

In the event that Region Örebro County processes personal data on behalf of someone else, such as another region or municipality, Region Örebro County may be a data processor.

How long your data will be stored depends on the nature of the personal data and on which legal basis it has been collected. Some data is stored forever, while other data is deleted as soon as it is no longer needed.

Who we may share your personal data with depends on the nature of the personal data. For example, personal data within healthcare is subject to confidentiality.

The data may only be disclosed after an assessment of whether disclosure will lead to harm (Swe. "menprövning”), your consent or if another legal basis exists for a disclosure. Personal data in other areas may need to be disclosed under the provisions of law or based on a decision by another authority.

Region Örebro County is an authority, which means that it is subject to the principle of public access to official documents. The principle of public access to official documents means that the public has a right to transparency with regards to the activities of the authority. This includes a right to have access to official documents. GDPR does not constitute any change in this respect.

Region Örebro County sometimes uses the services of suppliers that operate outside the EU/EEA, in a so-called third country. This is done in order to provide good services and systems.

If we transfer personal data to third countries, a check will be made that there is an appropriate level of protection in that country or that there are special guarantees that the data and your rights are protected. Adequate guarantees may for example be that the transfer is governed by specific contractual clauses that protect your rights.

Region Örebro County uses camera surveillance to monitor a number of areas of its operations. Cameras are installed

  • on the grounds of the University Hospital
  • Lindesberg Hospital
  • Karlskoga Hospital
  • Public Dental Service

Video recordings are made in various areas, such as:

  • entrances
  • underground tunnels
  • public corridors
  • waiting rooms.

Visitors, staff and others who pass through these areas are affected by the video recording.

Region Örebro County does not store data for a longer period than what is specified in authorisation decisions and which is necessary for the purpose of maintaining security as well as to prevent, deter and detect crime.

Legal basis

Region Örebro County conducts activities of general interest and is governed by laws and regulations. Purpose of camera surveillance

  • A safe and secure environment is provided for patients, staff, relatives and other visitors who spend time in any of Region Örebro County’s premises by being able to prevent, deter and detect security incidents, disturbances and accidents in time.
  • If a crime is committed, it should be possible to assist the police with investigative material in the form of recordings from the surveillance cameras.
  • Another important function of the camera surveillance is to be able to find patients who get lost.


If you as a visitor or as an employee have any questions about camera surveillance, please contact us by e-mail.

By law, you have a number of rights that allow you to obtain information about and control over your own personal data. This includes that you have a right to find out what personal data concerning you is handled by us, a right to have inaccurate personal data rectified and in some cases to have your data deleted.

Read more about your rights according to the GDPR, Swedish Authority for Privacy Protection.

Request a register extract

You have the right to contact us and request a so-called register extract to find out what data concerning you is handled by us. Please use the form below and send it by post.

Region Örebro County
Box 1613
701 16 Örebro


If you suspect that someone is processing your personal data in a way that violates the General Data Protection Regulation (GDPR), you can file a complaint to us or to the Swedish Authority for Privacy Protection.

File a GDPR-complaint, Swedish Authority for Privacy Protection.

Contact the region’s Data Protection Officer if you have any questions that concern the processing of personal data or you would like to find out about your rights under GDPR.

Did the content help you?

Last updated: Monday, May 23, 2022