Swedish recruitment agencies face specific legal requirements designed to prevent discrimination and promote equal opportunity. Understanding how the Discrimination Act (2008:567) and GDPR apply to your hiring processes is essential to managing compliance risk and avoiding liability.
The Discrimination Act (2008:567) — seven protected grounds
The Discrimination Act (Diskrimineringslagen 2008:567) sets out seven protected grounds that employers and recruitment agencies must consider. Under the Act, discrimination based on any of these grounds is generally prohibited when selecting candidates:
- Sex
- Gender identity or expression
- Ethnicity
- Religion or other belief
- Disability
- Sexual orientation
- Age
Agencies are typically required to ensure that none of these characteristics influence hiring decisions. This includes avoiding unconscious bias and the use of any information that could lead to discrimination.
The Act applies not only to direct discrimination but also to indirect discrimination — policies or practices that disproportionately disadvantage individuals based on the protected grounds. Recruitment agencies should therefore examine their CV screening and candidate presentation processes closely.
Aktiva åtgärder: active measures for equal opportunity
Swedish law uniquely requires employers and agencies to take "aktiva åtgärder" (active measures) to promote equal opportunity and prevent discrimination. This is more than a passive non-discrimination stance; it means actively working to:
- Identify and address barriers to equality in recruitment
- Implement procedures that support diversity and inclusion
- Monitor recruitment outcomes to check for bias
These measures should be documented. Agencies generally keep records showing what steps they have taken to ensure fair hiring practices. This documentation can prove important in case of discrimination claims or audits.
Active measures might include anonymising CVs, standardising interview questions, or training recruiters to recognise bias. While these steps take effort, they're expected under Swedish law and help reduce compliance risk.
GDPR obligations for Swedish agencies
Sweden implements GDPR with particular attention to personal data protection in recruitment. Agencies processing candidate data must comply with general data protection principles, including:
- Lawfulness, fairness, and transparency
- Purpose limitation (only collect data necessary for recruitment)
- Data minimisation (avoid excess information)
- Accuracy and storage limitation
- Security of processing
In particular, GDPR requires agencies to have a lawful basis for processing CVs and to inform candidates about how their data is used. Sensitive data related to the protected grounds under the Discrimination Act may require additional safeguards.
Agencies typically need to delete or anonymise candidate data when no longer needed. They should also ensure candidates can exercise their GDPR rights, such as access and correction.
For more details on GDPR in recruitment, see our GDPR recruitment compliance guide.
What to remove from CVs before submission
To reduce discrimination risk and comply with active measures, Swedish recruitment agencies generally remove or anonymise certain information from CVs before submitting them to clients or hiring managers:
- Candidate name
- Date of birth or age indicators
- Photograph
- Gender identifiers (e.g., titles like Mr, Mrs)
- Ethnicity or nationality information
- Religious or political affiliations
- Personal identification numbers
Removing these details helps avoid bias based on protected grounds and supports blind hiring principles. This can make the CV less personalised or detailed, which may affect client preferences.
The trade-off is between compliance risk and candidate presentation. Agencies should communicate clearly with clients about what information is removed and why.
Distill strips the name, email, phone, photo, and graduation year from the CV before you submit it, helping you meet Swedish blind hiring practices without manual work.
FAQ
Does Sweden require full anonymisation of CVs?
No. The Discrimination Act and active measures encourage removing identifiable information linked to protected grounds. Full anonymisation isn't legally mandated as in some other countries. Agencies should balance anonymisation with practical recruitment needs.
How often must active measures be reviewed?
Active measures should be ongoing and regularly reviewed, typically annually or as part of your compliance audit. Documentation should show continuous efforts to improve equality in recruitment.
What if a client requests full CVs including sensitive details?
Agencies should explain the legal risks of sharing sensitive personal data. Where clients insist, agencies may consider additional consent or disclaimers but should document these requests carefully.
Are there penalties for non-compliance?
Failing to comply with the Discrimination Act or GDPR can expose agencies to complaints, investigations, and fines. The Swedish Equality Ombudsman (Diskrimineringsombudsmannen) oversees enforcement of discrimination laws.
Can Distill help with GDPR and blind hiring compliance?
Yes. Distill automates the removal of personal and sensitive information from CVs before submission, supporting your active measures and GDPR obligations.
For a broader view of blind hiring laws across regions, see our blind hiring laws by country guide.
If your agency submits 20+ CVs a week to Swedish clients, Distill formats them to the spec above automatically — helping you stay compliant without slowing down your team. Try Distill free.