Under the Act on Registers of national vaccination programmes (2012:453), care providers must report all vaccinations within the vaccination programme for children, vaccination programme against pneumococcal infections for risk groups and COVID-19 vaccinations to the National vaccination register. This applies to vaccinations within the vaccination programme for children carried out from 1 January 2013, the vaccination programme against pneumococcal infections for risk from December 2022 and COVID-19 vaccinations from 1 January 2021. The vaccinations are then registered in the National vaccination register and the Public Health Agency of Sweden is the data controller.
The purpose of the National vaccination register is to monitor the effect of national vaccination programmes and COVID-19 vaccinations. Accordingly, Sweden gets a better tool for follow-up and surveillance of national vaccination programmes and COVID-19 vaccinations as regards vaccination coverage, protective effect, vaccine failure and adverse effects.
Several types of information are kept in the register: the date of the vaccination, the vaccinated person’s personal identification number or coordination number, the name and batch number of the vaccine, the name of the care provider and the residential area of the vaccinated person.
You have the right to request to see the information that the Public Health Agency of Sweden has registered on you or your child, under the General Data Protection Regulation (GDPR). If any information is incorrect or misleading, you may have it corrected.
The data in the register is protected by absolute confidentiality under Section 24 of the Public Access to Information and Secrecy Act (2009:400) and must not be disclosed to any third party. The only exception is information that is needed for research and information that does not reveal an individual’s identity. The register is separate from other activities at the Public Health Agency of Sweden and only a few people have access to it. The Agency is responsible for the personal data in the register, which means that the Agency must ensure that all personal data is processed in a manner that complies with the relevant rules. If the Public Health Agency of Sweden breaches these rules, you may have the right to claim for damages.
The recorded data is kept in the register for all time (in accordance with the Archives Act 1990: 782) to enable follow-up work to be carried out over long periods of time.
Act on Registers of national vaccination programmes (riksdagen.se) (in Swedish)