Remote work and BYOD – what should the employer regulate?
Employer guide to remote work, hybrid work, and BYOD: work environment, working hours, information security, personal data, equipment, and clear internal policies.
Read the guideMALLBUTIKEN KNOWLEDGE LIBRARY
Business guides – contracts, HR, AI & compliance — IT & dataskydd
Guider för företag om avtal, bolagsrätt, HR, arbetsrätt, AI, dataskydd och cybersäkerhet. Hitta praktisk vägledning och dokumentmallar.
Explore topics
What would you like to learn?
Explore guides by topic and continue to relevant document templates.
Guides in this category
Articles & guidance
Choose an article to explore the rules, practical questions and common situations within this topic.
Record of Processing Activities under GDPR Article 30 – how to build a RoPA
Guide to the Record of Processing Activities (RoPA) under GDPR Article 30: content, responsibilities, exemptions, and how the record is used in practical data protection work.
Read the guide
EU Data Act – what must companies agree upon regarding data and cloud services?
Practical guide to the EU Data Act for businesses: data access, data sharing, connected products, and switching between cloud and data processing services.
Read the guide
DORA and ICT provider agreements – what contractual requirements apply?
Guide to DORA's requirements for agreements with ICT providers, critical or important functions, subcontractors, SLAs, data, audit, and exit.
Read the guide
DPIA / Data Protection Impact Assessment under GDPR – when is it required and how is it done?
Guide to Data Protection Impact Assessment (DPIA) under GDPR Article 35: when it is required, how risks are assessed, and when prior consultation may be necessary.
Read the guide
Balancing test under GDPR – how to document legitimate interest
Guide to balancing of interests and Legitimate Interest Assessment (LIA) according to GDPR Article 6(1)(f), including a three-part test, documentation, and examples.
Read the guide
Personal data breach according to GDPR – 72 hours, risk assessment and IMY notification
Practical guide for companies affected by a personal data breach: assess risk, document the incident, notify the Swedish Authority for Privacy Protection (IMY) if necessary, and inform those affected.
Read the guide
GDPR Data Subject Access Request – how companies handle the rights of data subjects
Guide to subject access requests and the rights of data subjects under GDPR: deadlines, identity verification, documentation, and practical workflow.
Read the guide
SaaS exit and data migration – what should the agreement regulate?
What should the SaaS agreement say about exit? A guide to data export, formats, API, metadata, migration support, costs, access, deletion, backups, and exit testing.
Read the guide
Data controller or data processor – what is the difference?
Understand the difference between a controller and a processor under the GDPR, how the roles are determined in practice, and when a data processing agreement is required.
Read the guide
SLAs in SaaS agreements – availability, response time, RTO, RPO, and service credits
Practical guide to SLAs for SaaS: availability, incident levels, response time, RTO/RPO, service credits, maintenance, and escalation.
Read the guide
AI, cybersecurity, and IT agreements – a guide for companies
Comprehensive guide to AI governance, AI policy, GDPR/DPA, SaaS agreements, NIS2, supplier security, BIA, and business continuity planning for companies.
Read the guideRelated templates
Corporate agreements – templates
Understand the documents. Find your next step.
From a question to the right document.
Understand your situation
Start with an overview, then read a guide relevant to your circumstances.
Check the requirements
Check the update date and follow the sources. Rules and circumstances can change.
Choose and adapt a template
Check the contents, language and format on the product page before choosing.