New laws 1 July 2026: strengthened cybersecurity and e-evidence

On 1 July 2026, several legislative amendments enter into force concerning cybersecurity and digital evidence. Here is what affects businesses, short and concise.

By the aivalet.nu editorial team · Published 2026-07-01

Short answer: On 1 July 2026, the national cybersecurity centre is strengthened and new rules for electronic evidence are introduced. No direct requirements on small businesses, but the trend is clear: documented information security is becoming increasingly important.

On 1 July 2026, new rules begin to apply. Most are aimed at authorities. But they show which way the wind is blowing: requirements for information security are increasing.

Strengthened national cybersecurity centre

Lagparagraf

New laws strengthen the national cybersecurity centre at FRA. The centre will find it easier to share information between authorities. It will also be able to handle personal data in its work and protect data from private individuals who get in touch. The goal is to detect and stop cyber threats faster.

New rules for electronic evidence (e-evidence)

From 1 July 2026, service providers can report a disclosure point in Sweden. From 18 August, they can begin to disclose electronic evidence under the new rules. It is part of the EU’s rules for cross-border evidence gathering.

What it means for you

Most small businesses do not need to do anything urgent. But together with NIS2/Cybersecurity Act, which has applied since January 2026, the trend is clear. Documented security and knowing where data ends up are becoming increasingly important. This also applies to smaller suppliers selling to larger customers.

An easy first step is to review the basics:

Get a password manager, for example 1Password or Bitwarden.
Choose a storage location where you know where the data is, for example Nextcloud.

Tools mentioned

Bitwarden

Bitwarden Inc.

4,3 Very good

Outside EU Passwords & security Freemium ISO 27001

The open-source standard among password managers with low price and selectable EU region for data storage. The catch: the company is American, so the CLOUD Act applies regardless of where data is stored. If you want to avoid it completely you must self-host yourself.

Open source with annual third-party audits
EU server region can be selected at registration

American company covered by the CLOUD Act even with EU storage

Best for: Cost-conscious small businesses that want open source and the option to self-host

Read review → Details

Nextcloud

4,0 Very good

German/EU

EU/EEA Collaboration Freemium

German platform for files, collaboration, chat and calendar, Europe's great alternative to Google Workspace and Microsoft 365.

Comprehensive: files, chat, calendar, documents
German, can run on own EU servers

Requires server operation

Best for: Companies that want control over files and collaboration within the EU.

Read review → Details

1Password

AgileBits Inc.

3,5 Good

EU-approved third country Passwords & security From approx 29 SEK/month ISO 27001

The market's most polished password manager with the industry's broadest certification portfolio (ISO 27001/27017/27018/27701, SOC 2). The catch: Canadian company with American venture capital, no free tier, and not open source.

Best in class on usability and design, which drives high adoption among employees
EU data residency can be selected at account creation

No free tier, only 14-day trial

Best for: Companies that prioritize usability and certifications over EU jurisdiction

Try 1Password → 14-day free trialAffiliate link Details

This is general information, not legal advice. See How we review.