Naming convicted people in Swedish media
Publishing a court report about an identified person is not a choice between journalism, defamation, and GDPR processing. The publication is GDPR processing; it may be processing for journalistic purposes; and the identification may simultaneously satisfy the elements of defamation.
The questions operate at different levels:
| Question | What it decides |
|---|---|
| Is personal data collected, stored, edited, or disseminated? | Whether the activity is GDPR processing. Publication almost always is. |
| Is the processing carried out for journalistic purposes? | Whether Sweden may apply the Article 85 balance and its journalistic derogations. |
| Does the publication identify someone as criminal or blameworthy? | Whether the starting elements of Swedish defamation are present. |
| Was publishing the identifying allegation defensible, and was it true or reasonably grounded? | Whether the defamation exception prevents liability. |
| Is the medium covered by YGL? | Which constitutional responsibility and procedure govern publication offences; it does not settle the other questions. |
“Doxxing” is therefore a descriptive label rather than the decisive category. A name, photograph, address, personnummer, and full judgment can each add a different privacy intrusion and require a separate publication justification.
Journalism is purpose- and operation-specific
Legal Newsdesk Sweden C-199 24 defines journalism broadly, but requires a purpose of informing the public, editing or an editorial policy, factual verification, and compliance with journalistic ethical rules or codes.1 Payment and criminal-conviction subject matter do not themselves exclude journalism.2
The CJEU distinguished editorial work from simply making public criminal judgments available to anyone who pays. That second operation did not appear journalistic without the required purpose and practices.3 The judgment therefore does not classify an entire publisher once and for all. Its reasoning calls for examination of the processing performed for the particular product or publication.
HD drew a similar practical line in 2025. It allowed restrictions against distributing criminal judgments with their personal data or making the data searchable, while preserving the recipient’s ability to use personal data in editorially processed news text and news material.4 That disclosure decision is not a final liability rule for publishers, but it is strong evidence that Swedish law can distinguish court reporting from raw or searchable document supply.
Truth does not by itself defeat defamation
Swedish defamation begins when a person is identified as criminal or otherwise blameworthy in a way apt to expose that person to others’ contempt. Naming someone as convicted ordinarily meets that threshold. No liability follows if giving the information was defensible in the circumstances and the publisher proves that it was true or had reasonable grounds for it.5
The court judgment normally supplies strong proof of truth about what the court decided. It does not by itself prove that publishing the person’s identity was defensible. The public interest in the case and the public interest in knowing this person’s identity are separate propositions.
Relevant considerations can include:
- the seriousness, recency, and continuing relevance of the offence;
- whether the person has a public role or present position of trust;
- whether identification is needed to explain an institutional failure or other matter of public concern;
- the quality of verification, contextual accuracy, and opportunity to respond;
- the subject’s age and vulnerability;
- how widely, prominently, and persistently the identity is distributed;
- whether the publication reveals addresses, family relationships, victims, witnesses, or other details unnecessary to the public-interest account.
These are not a rule that only public figures can ever be named. They explain why the issue cannot be resolved by saying either “the judgment is public” or “the person was convicted.”
Sweden’s voluntary media-ethics rules reflect the same distinction. They advise great caution with names and identifying details unless an evident public interest requires identification.6 In one decision, MO accepted reporting about a serious offence against a police officer but found no compelling public interest in naming and picturing the young private individual.7 In another, an investigation involving a powerful football agent was accepted because the subject matter, the person’s role, the reporting, and the opportunity to respond supported publication.8
Media ethics are not the criminal-law test and membership in the system is not a condition of journalism. They nevertheless supply concrete evidence about the editorial and ethical practices that the CJEU says are relevant.
Google can supply the missing person index
A publisher does not need to offer an internal people-search field for a named article to function as a person-centred criminal profile. When an external search engine indexes the article, the person’s name becomes the lookup key and the result ranking becomes the distribution mechanism.
GC and Others C-136 17 holds that search-engine indexing is processing separate from and additional to the source publication. It can seriously increase the privacy intrusion by giving users a structured overview of the person and exposing a page to people who otherwise would not find it. Google is therefore independently responsible for its name-search result even if the source page is lawful journalism.
Dumpen selected judgments is technically configured
for ordinary search indexing.
Its preserved HTML has no noindex directive
and includes canonical,
pagination,
feed,
and structured search metadata.
This does not establish a stable ranking for every name,
but it makes external name-search discovery
a foreseeable part of the publication’s reach.
Functionally, a first-position result containing a full name, photograph, address, criminal judgment, and hostile framing can resemble a permanent conviction dossier even though the site and Google remain separate controllers. That functional similarity does not automatically make the source article non-journalistic under C-199/24. It does make the necessity of each identifying detail, the ethics of the presentation, the extent of dissemination, and the consequences for the person materially harder to treat as incidental.
For defamation, foreseeable name-search prominence and persistence can increase the relevant manner and extent of dissemination and the seriousness of the resulting harm. The judgment may prove the underlying conviction, but added factual allegations require their own support, and aggressive framing remains relevant to whether the publication as a whole was defensible.
For Google, IMY right to remove search results states that a result leading to criminal information must be removed unless its continued display for the person’s name is strictly necessary for freedom of information. The source can remain online after de-referencing. A Google refusal can be challenged through IMY or in a civil action; it is not the final legal determination.
The crime’s seriousness can make that challenge difficult without making it legally futile. Conseil d’Etat 401258 is a direct counterexample to a categorical child-sex-offence exception. It found name-linked access to accurate press reports about sexual touching of minors not strictly necessary after weighing the private person’s lack of notoriety, time elapsed, reintegration harm, and the permanent access produced by Google. The seven-year prison sentence and continuing socio-judicial supervision did not make identity permanently relevant by themselves.
The publication can change character over time
An article may be defensible when a serious case is current but become harder to justify as a permanently name-searchable profile after the person has served the sentence and the story has lost present relevance.
In Hurbain v Belgium, the ECHR found no violation of press freedom when a newspaper was required to anonymize a decades-old online archive article about a rehabilitated private person. The continued archive remained available, but the person’s name no longer functioned as an indefinite virtual criminal record.9 That decision does not automatically determine Swedish cases, but it shows that genuine journalism at first publication does not guarantee perpetual named availability.
Applying the distinctions to Dumpen
Dumpen selected judgments and Dumpen court monitoring weeks 21 and 22 2026 show several different operations. Their likely characterization differs:
| Dumpen operation | Journalism assessment | Identification and defamation assessment |
|---|---|---|
| Weekly court schedules using case numbers, ages, and allegations without names | Strongly resembles ordinary edited court reporting. | Lower identification risk, although combinations can still identify someone locally. |
| A selected, verified article explaining a recent judgment and its public significance | Journalism is plausible, especially with original reporting, context, and response. | Naming still requires its own defensibility; seriousness alone does not settle it. |
| A short item consisting mainly of name, place, offence, sentence, and a judgment copy | Weaker evidence of journalism and closer to the Lexbase operation criticized by the CJEU. | The article identifies the person as criminal; truth does not answer whether naming was defensible. |
| Hosting or supplying the full judgment | A separate dissemination operation from the edited article; necessity and safeguards need their own assessment. | It can expose addresses and data about victims, relatives, and witnesses that add little to the report. |
| An article joining an earlier conviction to a new decoy investigation | Selection, synthesis, and original reporting support a journalistic purpose. | The accuracy, present relevance, response, and necessity of identification remain separate questions. |
| A long-lived archive externally searchable by private people’s names | Original journalism may still exist, but Google can turn separate articles into a person index and perpetual identification becomes harder to justify as relevance fades. | Passage of time, rehabilitation, result prominence, address and image disclosure, searchability, and continuing harm become increasingly important. |
This is an assessment framework rather than a prediction that every court will classify each row in that way. The strongest conclusion is narrower: Dumpen’s edited court reporting is a materially stronger journalism case than indiscriminate access to a conviction database, while its thinnest named judgment posts and full-document distribution are the closest Lexbase comparators.
An utgivningsbevis does not erase this distinction. It gives the website YGL coverage and fixes responsibility for protected publications; it does not make every personal-data operation journalistic, and it does not make a true identification automatically defensible.
- Track Swedish application of C-199/24 to named judgment articles and mixed editorial databases.
- Track the appeal in Dumpen gross defamation judgment.