The GDPR in its original wording and the Act also apply to processing in activities outside the scope of Union law and in common foreign and security policy, except in activities governed by the Armed Forces (2021:1171), National Defence Radio Establishment (2021:1172) and Security Service (2019:1182) processing Acts; from 1 January 2027 (SFS 2026:1589) processing under the new Act on the Swedish foreign intelligence service (2026:1575) is also excepted.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.