Sweden bars web ChatGPT at work: a data lesson for SMEs
In brief
According to the Swedish government, from 26 October 2026 ministry staff are no longer allowed to open ChatGPT and Claude in their web versions on work computers, because of security risks tied to data processing. The measure targets browser access, not the models themselves. It followed a review at the Swedish Transport Agency that found uses seen as a problem in public-sector work.
What it changes for an SME
This rule applies to Swedish government bodies, not to your firm: it does not add a new duty in Belgium, France or Luxembourg. It does show a risk many SMEs of 10 to 250 people already run, namely staff pasting internal or customer information into a consumer chatbot in the browser. Stockholm's concern, as reported, is that such data could be kept and reused to improve the models. Copilot remains allowed there because, according to the Swedish government, it has a security agreement and passed a security test; the practical test for you is whether your AI tools come with a real data-processing contract.
What you can do
- Check whether staff put customer, HR or internal information into ChatGPT or Claude in the browser.
- Ask whether your AI tools are covered by a security and data-processing contract, of the kind Sweden cited for Copilot.
- Restrict consumer web chatbots on work devices if sensitive data cannot be kept out of prompts.
Let's talk about the time you could save.
In 20 minutes, we find where AI could save you time or money. Free, no commitment.