{"id":"https://openalex.org/W4399745000","doi":"https://doi.org/10.1145/3673659","title":"Half a Step Behind\u2014Bulk Disclosure of Confidential Data in Third-party GenAI Solutions under the Swedish Public Access to Information and Secrecy Act","display_name":"Half a Step Behind\u2014Bulk Disclosure of Confidential Data in Third-party GenAI Solutions under the Swedish Public Access to Information and Secrecy Act","publication_year":2024,"publication_date":"2024-06-17","ids":{"openalex":"https://openalex.org/W4399745000","doi":"https://doi.org/10.1145/3673659"},"language":"en","primary_location":{"id":"doi:10.1145/3673659","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3673659","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3673659","source":{"id":"https://openalex.org/S4210232200","display_name":"Digital Government Research and Practice","issn_l":"2639-0175","issn":["2639-0175","2691-199X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Digital Government: Research and Practice","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3673659","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5049991628","display_name":"Bj\u00f6rn Lundell","orcid":"https://orcid.org/0000-0002-2825-135X"},"institutions":[{"id":"https://openalex.org/I205158640","display_name":"University of Sk\u00f6vde","ror":"https://ror.org/051mrsz47","country_code":"SE","type":"education","lineage":["https://openalex.org/I205158640"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Bj\u00f6rn Lundell","raw_affiliation_strings":["University of Sk\u00f6vde","University of Sk\u00f6vde, Sk\u00f6vde, Sweden"],"raw_orcid":"https://orcid.org/0000-0002-2825-135X","affiliations":[{"raw_affiliation_string":"University of Sk\u00f6vde","institution_ids":["https://openalex.org/I205158640"]},{"raw_affiliation_string":"University of Sk\u00f6vde, Sk\u00f6vde, Sweden","institution_ids":["https://openalex.org/I205158640"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5032364318","display_name":"Mathias Lindroth","orcid":"https://orcid.org/0000-0003-1866-713X"},"institutions":[{"id":"https://openalex.org/I205158640","display_name":"University of Sk\u00f6vde","ror":"https://ror.org/051mrsz47","country_code":"SE","type":"education","lineage":["https://openalex.org/I205158640"]},{"id":"https://openalex.org/I4210149816","display_name":"Legacy International","ror":"https://ror.org/04vs52k24","country_code":"US","type":"nonprofit","lineage":["https://openalex.org/I4210149816"]}],"countries":["SE","US"],"is_corresponding":false,"raw_author_name":"Mathias Lindroth","raw_affiliation_strings":["ACF Legal International AB","University of Sk\u00f6vde","ACF Legal International AB, Malm\u00f6, Sweden","University of Sk\u00f6vde, Sk\u00f6vde, Sweden"],"raw_orcid":"https://orcid.org/0000-0003-1866-713X","affiliations":[{"raw_affiliation_string":"ACF Legal International AB","institution_ids":["https://openalex.org/I4210149816"]},{"raw_affiliation_string":"University of Sk\u00f6vde","institution_ids":["https://openalex.org/I205158640"]},{"raw_affiliation_string":"ACF Legal International AB, Malm\u00f6, Sweden","institution_ids":[]},{"raw_affiliation_string":"University of Sk\u00f6vde, Sk\u00f6vde, Sweden","institution_ids":["https://openalex.org/I205158640"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5031610724","display_name":"Jonas Gamalielsson","orcid":"https://orcid.org/0000-0003-2700-2535"},"institutions":[{"id":"https://openalex.org/I205158640","display_name":"University of Sk\u00f6vde","ror":"https://ror.org/051mrsz47","country_code":"SE","type":"education","lineage":["https://openalex.org/I205158640"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Jonas Gamalielsson","raw_affiliation_strings":["University of Sk\u00f6vde","University of Sk\u00f6vde, Sk\u00f6vde, Sweden"],"raw_orcid":"https://orcid.org/0000-0003-2700-2535","affiliations":[{"raw_affiliation_string":"University of Sk\u00f6vde","institution_ids":["https://openalex.org/I205158640"]},{"raw_affiliation_string":"University of Sk\u00f6vde, Sk\u00f6vde, Sweden","institution_ids":["https://openalex.org/I205158640"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101660261","display_name":"Andrew Katz","orcid":"https://orcid.org/0000-0002-1001-0283"},"institutions":[{"id":"https://openalex.org/I205158640","display_name":"University of Sk\u00f6vde","ror":"https://ror.org/051mrsz47","country_code":"SE","type":"education","lineage":["https://openalex.org/I205158640"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Andrew Katz","raw_affiliation_strings":["Bristows LLP","University of Sk\u00f6vde","University of Sk\u00f6vde, Sk\u00f6vde, Sweden","Bristows LLP, London, United Kingdom of Great Britain and Northern Ireland"],"raw_orcid":"https://orcid.org/0000-0002-1001-0283","affiliations":[{"raw_affiliation_string":"Bristows LLP","institution_ids":[]},{"raw_affiliation_string":"University of Sk\u00f6vde","institution_ids":["https://openalex.org/I205158640"]},{"raw_affiliation_string":"University of Sk\u00f6vde, Sk\u00f6vde, Sweden","institution_ids":["https://openalex.org/I205158640"]},{"raw_affiliation_string":"Bristows LLP, London, United Kingdom of Great Britain and Northern Ireland","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072908460","display_name":"Christoffer Brax","orcid":"https://orcid.org/0000-0002-2161-164X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Christoffer Brax","raw_affiliation_strings":["Combitech AB","Combitech AB, Sk\u00f6vde, Sweden"],"raw_orcid":"https://orcid.org/0000-0002-2161-164X","affiliations":[{"raw_affiliation_string":"Combitech AB","institution_ids":[]},{"raw_affiliation_string":"Combitech AB, Sk\u00f6vde, Sweden","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101539263","display_name":"Tomas Persson","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Tomas Persson","raw_affiliation_strings":["Digitalist Sweden AB","Digitalist Sweden AB, Stockholm, Sweden"],"raw_orcid":"https://orcid.org/0000-0003-3959-0266","affiliations":[{"raw_affiliation_string":"Digitalist Sweden AB","institution_ids":[]},{"raw_affiliation_string":"Digitalist Sweden AB, Stockholm, Sweden","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5064564598","display_name":"Anders Mattsson","orcid":"https://orcid.org/0000-0001-8986-8751"},"institutions":[{"id":"https://openalex.org/I2801875454","display_name":"Husqvarna (Sweden)","ror":"https://ror.org/02ayh6y70","country_code":"SE","type":"company","lineage":["https://openalex.org/I2801875454"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Anders Mattsson","raw_affiliation_strings":["Husqvarna AB","Husqvarna AB, Huskvarna, Sweden"],"raw_orcid":"https://orcid.org/0000-0001-8986-8751","affiliations":[{"raw_affiliation_string":"Husqvarna AB","institution_ids":["https://openalex.org/I2801875454"]},{"raw_affiliation_string":"Husqvarna AB, Huskvarna, Sweden","institution_ids":["https://openalex.org/I2801875454"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103085971","display_name":"Tomas Gustavsson","orcid":"https://orcid.org/0000-0001-7844-5614"},"institutions":[{"id":"https://openalex.org/I4210111859","display_name":"PrimeKey Solutions (Sweden)","ror":"https://ror.org/028jkr794","country_code":"SE","type":"company","lineage":["https://openalex.org/I4210111859"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Tomas Gustavsson","raw_affiliation_strings":["PrimeKey Solutions AB","PrimeKey Solutions AB, Solna, Sweden"],"raw_orcid":"https://orcid.org/0000-0001-7844-5614","affiliations":[{"raw_affiliation_string":"PrimeKey Solutions AB","institution_ids":["https://openalex.org/I4210111859"]},{"raw_affiliation_string":"PrimeKey Solutions AB, Solna, Sweden","institution_ids":["https://openalex.org/I4210111859"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5022217964","display_name":"Jonas Feist","orcid":"https://orcid.org/0000-0002-6745-0853"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jonas Feist","raw_affiliation_strings":["RedBridge AB","RedBridge AB, Stockholm, Sweden"],"raw_orcid":"https://orcid.org/0000-0002-6745-0853","affiliations":[{"raw_affiliation_string":"RedBridge AB","institution_ids":[]},{"raw_affiliation_string":"RedBridge AB, Stockholm, Sweden","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5006693225","display_name":"Jonas \u00d6berg","orcid":"https://orcid.org/0000-0002-8629-0189"},"institutions":[{"id":"https://openalex.org/I1294350288","display_name":"Scania (Sweden)","ror":"https://ror.org/03g4sde39","country_code":"SE","type":"company","lineage":["https://openalex.org/I1294350288"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Jonas \u00d6berg","raw_affiliation_strings":["Scania CV AB","Scania CV AB, S\u00f6dert\u00e4lje, Sweden"],"raw_orcid":"https://orcid.org/0000-0002-8629-0189","affiliations":[{"raw_affiliation_string":"Scania CV AB","institution_ids":["https://openalex.org/I1294350288"]},{"raw_affiliation_string":"Scania CV AB, S\u00f6dert\u00e4lje, Sweden","institution_ids":["https://openalex.org/I1294350288"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.8437,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":{"value":0.77378633,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":95},"biblio":{"volume":"6","issue":"2","first_page":"1","last_page":"9"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.9970999956130981,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.9970999956130981,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9876000285148621,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9832000136375427,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/secrecy","display_name":"Secrecy","score":0.9588942527770996},{"id":"https://openalex.org/keywords/confidentiality","display_name":"Confidentiality","score":0.8982338905334473},{"id":"https://openalex.org/keywords/third-party","display_name":"Third party","score":0.7134836316108704},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.6055648922920227},{"id":"https://openalex.org/keywords/public-access","display_name":"Public access","score":0.5568272471427917},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.4751179814338684},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.448275089263916},{"id":"https://openalex.org/keywords/public-disclosure","display_name":"Public disclosure","score":0.42196884751319885},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.2855427861213684},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.08687755465507507}],"concepts":[{"id":"https://openalex.org/C2776452267","wikidata":"https://www.wikidata.org/wiki/Q1503443","display_name":"Secrecy","level":2,"score":0.9588942527770996},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.8982338905334473},{"id":"https://openalex.org/C2983583741","wikidata":"https://www.wikidata.org/wiki/Q16785388","display_name":"Third party","level":2,"score":0.7134836316108704},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.6055648922920227},{"id":"https://openalex.org/C2982933515","wikidata":"https://www.wikidata.org/wiki/Q104381823","display_name":"Public access","level":2,"score":0.5568272471427917},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.4751179814338684},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.448275089263916},{"id":"https://openalex.org/C2776305056","wikidata":"https://www.wikidata.org/wiki/Q7257723","display_name":"Public disclosure","level":2,"score":0.42196884751319885},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.2855427861213684},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.08687755465507507},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3673659","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3673659","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3673659","source":{"id":"https://openalex.org/S4210232200","display_name":"Digital Government Research and Practice","issn_l":"2639-0175","issn":["2639-0175","2691-199X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Digital Government: Research and Practice","raw_type":"journal-article"},{"id":"pmh:oai:DiVA.org:his-23979","is_oa":true,"landing_page_url":"http://urn.kb.se/resolve?urn=urn:nbn:se:his:diva-23979","pdf_url":"https://his.diva-portal.org/smash/get/diva2:1872788/FULLTEXT02","source":{"id":"https://openalex.org/S4306400653","display_name":"Diva portal (Dalarna University Library)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":{"id":"doi:10.1145/3673659","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3673659","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3673659","source":{"id":"https://openalex.org/S4210232200","display_name":"Digital Government Research and Practice","issn_l":"2639-0175","issn":["2639-0175","2691-199X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Digital Government: Research and Practice","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.75}],"awards":[],"funders":[{"id":"https://openalex.org/F4320321759","display_name":"Stiftelsen f\u00f6r Kunskaps- och Kompetensutveckling","ror":"https://ror.org/02cbq7e25"}],"has_content":{"grobid_xml":false,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4399745000.pdf"},"referenced_works_count":14,"referenced_works":["https://openalex.org/W2896640274","https://openalex.org/W3017205423","https://openalex.org/W3045834871","https://openalex.org/W3175272358","https://openalex.org/W3196292105","https://openalex.org/W4247676424","https://openalex.org/W4251808149","https://openalex.org/W4293588734","https://openalex.org/W4312116073","https://openalex.org/W4361799838","https://openalex.org/W4385452929","https://openalex.org/W4386329885","https://openalex.org/W4386711999","https://openalex.org/W4388827078"],"related_works":["https://openalex.org/W3183948672","https://openalex.org/W3173606202","https://openalex.org/W3110381201","https://openalex.org/W2778153218","https://openalex.org/W1531601525","https://openalex.org/W2150391494","https://openalex.org/W4323970276","https://openalex.org/W2621273485","https://openalex.org/W2205063632","https://openalex.org/W600051722"],"abstract_inverted_index":{"Technological":[0],"progress":[1],"poses":[2],"unique":[3],"challenges":[4],"for":[5,69,133],"the":[6,21,44,54,94,105,111,120,134,137,150,157],"public":[7,30,51,59],"sector.":[8],"New":[9],"technology":[10,85],"should":[11],"be":[12,18,33],"adopted,":[13],"but":[14],"it":[15],"must":[16,32],"always":[17],"done":[19],"within":[20],"framework":[22],"of":[23,46,113,136,152,156],"good":[24],"administration.":[25],"It":[26],"follows":[27],"laws":[28],"governing":[29],"administration":[31,92],"continuously":[34],"adapted.":[35],"Sweden":[36],"recently":[37],"amended":[38],"its":[39],"secrecy":[40,107],"legislation":[41,108],"to":[42,81,90,102,149],"facilitate":[43],"use":[45,112],"third-party":[47],"cloud":[48,67,144],"solutions":[49,68],"by":[50],"authorities.":[52],"When":[53],"amendment":[55,122],"was":[56,89],"enacted,":[57],"most":[58],"sector":[60],"organisations":[61],"had":[62],"already":[63],"been":[64],"using":[65],"external":[66],"a":[70],"long":[71],"time.":[72],"Today,":[73],"there":[74,87,128],"is":[75,123],"as":[76,86],"much":[77],"pressure":[78],"on":[79],"authorities":[80],"implement":[82],"Artificial":[83],"Intelligence":[84],"ever":[88],"move":[91,170],"into":[93],"cloud.":[95],"This":[96],"article":[97,147],"uses":[98],"traditional":[99],"legal":[100],"methodology":[101],"investigate":[103],"whether":[104],"Swedish":[106,153],"adequately":[109],"enables":[110],"cloud-based":[114],"GenAI":[115],"solutions.":[116],"Findings":[117],"indicate":[118],"that":[119,127,159],"recent":[121],"likely":[124],"insufficient":[125],"and":[126,155,166],"are":[129],"significant":[130],"practical":[131],"hurdles":[132],"application":[135],"law,":[138,154],"particularly":[139],"with":[140],"services":[141],"from":[142],"global":[143],"providers.":[145],"The":[146],"contributes":[148],"understanding":[151],"difficulties":[158],"can":[160],"occur":[161],"anywhere":[162],"when":[163],"policy":[164],"makers":[165],"legislators":[167],"do":[168],"not":[169],"in":[171],"tandem.":[172]},"counts_by_year":[{"year":2025,"cited_by_count":1}],"updated_date":"2026-07-23T08:03:31.855105","created_date":"2025-10-10T00:00:00"}