No data breach notification needed

However, according to the General Data Protection Regulation (GDPR), you still need to document the breach internally. To verify that a controller has done this, Swedish Authority for Privacy Protection may demand to take part of the documentation.

More information about the documention requirements can be found in the guidelines about personal data breaches from the European Data Protection Board (EDPB).