Sofia Edvardsen

Speaking today at #IDCCIOSummit in Stockholm. Most AI value is not lost in the model. It is lost in execution, ownership, and control. AI should scale only when ownership is explicit, controls are measurable, and decisions can be defended.

@sharpcookieadv In the Nordics, transparency and consensus are seen as strengths; but under the EU Data Act this can also mean a risk of sharing more than required. Balancing customer data rights with the protection of trade secrets will be critical and involve the A-team (CTO, CISO, DPO/legal)

At last week’s IDC Security Summit, our Partner Sofia Edvardsen received the strongest reactions came around one theme: 👉 The EU Data Act and its demand for disclosure of system & performance data that could include trade secrets. Three takeaways for leadership teams: 1️⃣ Judgment over checklists: rules require leadership judgment, not box-ticking. 2️⃣ Risk calibration, not elimination: manage disclosure without undermining IP & competitiveness. 3️⃣ Outcome foresight: procurement, valuations & customer trust will separate those who scale from those who stall. This is less about compliance as a silo, and more about acting as a risk navigator across legal, tech & business. 📩 We’ve prepared a 2026 Regulatory Quick-Start for CIOs, CISOs, CEOs & GCs: DM if you’d like a copy.

På IDC Security Summit i förra veckan väckte en fråga starkast reaktioner: 👉 EU:s Data Act och kravet på utlämnande av system- och prestandadata som typiskt sett inkluderar företagshemligheter. Mina reflektioner: flera av våra amerikanska klienter bygger redan processer för att skydda IP och hantera riskkalibrering, medan många nordiska bolag ännu bara börjat utforska konsekvenserna. Tre lärdomar för ledningsgrupper: 1️⃣ Bedömning framför checklistor: reglerna kräver ledningsbeslut, inte box-ticking. 2️⃣ Riskkalibrering, inte eliminering:  hantera utlämnande utan att underminera IP och konkurrenskraft. 3️⃣ Konsekvenser: upphandlingar, värderingar och kundförtroende avgör vem som lyckas skala. För oss i Norden blir frågan särskilt känslig: vi har en ambitiös och konsensusdriven kultur där transparens ses som en styrka. Det är en bra utgångspunkt; men innebär också risk att vilja dela mer än nödvändigt. Balansen mellan kundernas rätt till data och behovet att skydda företagshemligheter blir avgörande. 📩 Jag har sammanställt en 2026 Regulatory Quick-Start; hör av dig om du vill ta del av den.

EU:s Data Act förändrar spelplanen för system- och prestandadata. På min föreläsning på IDC Security Summit väckte detta störst reaktioner i rummet. Här är varför ledningsgrupper måste agera 👇

Let's stop sharing that Venn-diagram about Europe sucking at everything but regulation, and instead try to find the way forward. To get started, here is a short 10 point manifesto aimed at revitalizing Europe's economy through reduced regulatory burdens, enhanced innovation, and streamlined migration for skilled workers: 0. Reduce bureaucratic red tape by revising existing legislation to focus on outcomes rather than processes. Simplify compliance requirements for businesses, especially SMEs and startups, to encourage entrepreneurship and innovation. This includes cutting down on administrative burdens and expediting business approvals. 1. Introduce a unified EU regulatory sandbox for tech companies, allowing them to test new products and services in a controlled environment with temporary exemptions from certain regulations. Ths would help in rapidly advancing technology sectors like AI, blockchain, and biotech. The same thing should be done for fintech and crypto. Be inspired of what Malta has done to win the i-gaming sector. 2. Establish and expand funding mechanisms to support high-growth tech firms more effectively. Increase the agility of funding distribution to ensure that funds reach innovative projects in a timely manner, adapting to the fast-paced tech environment. A joint regulatorty framework for the financial markets would help immensely here. 3. Focus on core, fast growing and importnt developing technologies within Europe to reduce dependency on foreign tech giants. This includes investing in strategic sectors like semiconductors, AI, the clouds, and cybersecurity, with policies that encourage local R&D and production. It is late, later than you think, but it is not too late. 4. Harmonize regulations across member states to create a truly single market for technology and services. This would involve standardizing data protection laws, tax regimes, and company law to facilitate easier expansion of businesses across EU borders. This is why the EU was created, let's freaking embrace it! Read what Zuckerberg and Ek wrote about ths in The Economist. 5. Revamp visa and work permit systems to make Europe more attractive to global talent.We have huge opportunity now, with recent U.S. resentment towards highly-skilled workrs. Implement a fast-track, merit-based immigration policy for highly skilled workers, but with fewer restrictions and quicker processing times. EU Blue Card on steroids! 6. Integrate entrepreneurship and innovation into educational curriculums from an early stage, including AI education and possibly some kind of coding/programming skills, just understanding computers at an early stage (Martin Lorentzon will love this). Develop partnerships between educational institutions and businesses to nurture start-ups and tech talent, providing real-world experience and mentorship. Build, build, build! 7. Increase collaboration between public sectors and tech companies for research and development. Use public procurement to drive innovation by prioritizing contracts for innovative small companies, which can also serve as a testing ground for new technologies. Triple-helix model, but without the state making bold venture bets, but perhaps more acting as a facilitator and potential customer. 8. Lower the entry barriers for new tech companies by simplifying the procurement process and reducing the time from innovation to market. Encourage competition by ensuring that regulations do not disproportionately favor established companies over new entrants. Less compliance work, and sandbox regulations, bitte. 9. Reform tax policies to be more competitive globally. This could involve offering tax incentives for R&D investments, patent boxes, and favorable conditions for startups, which would help keep both companies and talent within Europe. Also, make a warrant / option scheme that works unified within the entire EU for startups and even bigger companies, with high incentives for staff and growth and innovation. MAKE EUROPE GREAT AGAIN. All the best, Mikael Pawlo Serial village idiot: Bokio/Redflag, Mr Green, Forza Football, Supertext, Wemind, Flexion Mobile, K6 and more.

Reminder: Join Us at IAPP Sweden today at 17:00 CET! 🚀 Don’t miss our AI Contracting Insights & AIGP Certification Webinar hosted by IAPP, happening today at 17:00 CET! We’ll be diving into critical strategies for contracting AI services, ensuring compliance, and managing business impact effectively. 👉 Register here to participate: iapp.org/connect/commun… Looking forward to connecting with you all and sharing valuable insights! #ai #sthlmai #Sthlmtech @the_iapp

Excited to share some insights from recent management discussions on running successful NIS2 compliance programs. The key takeaway? Aligning cybersecurity efforts with core business objectives and fostering cross-functional collaboration is crucial. I’ll be diving deeper into these topics at the IDC Security Forum on Sept 19, where I'll discuss how regulations like NIS2 & DORA are shaping business strategies and resilience. Looking forward to sharing more! 💼🔐 #NIS2 #IDCsecurity #Cybersecurity #Leadership #Compliance #BusinessStrategy

Im excited to speak at #sthlmfintechweek2024 share perspectives on how to manage cybersecurity incidents in an agile manner.   I will happily meet any fintech professionals before, during, or after Sthlm Fintech Week 2024! Tell me if you are going to be there and if you’d like to chat. @SthlmFintech #sthlmtech #sthlmai

The three #privacy elephants in the #AI room unequivocally exposed by @TC_IntLaw at @PrivacyPros #AIGG23: 🐘Legitimate interests 🐘Right to be informed 🐘Right to be forgotten

Looking forward to speak at @ComputerSweden Security day 25th October! I’ll share why 43% of AI projects are delayed, other issues to watch out for and lessons learned!

IMMINENT ADOPTION OF 🇪🇺🇺🇸ADEQUACY DECISION! 24 Member States voted YES for adoption 🇪🇺🇺🇸 adequacy decision by @EU_Commission, 3 abstained, NONE voted against. This shows that the very negative opinion of @EP_Justice didn’t convince Member States #DPF #SchremsII #SchremsIII

My message on #AI regulation on the second day of #EUCO: Europe should seize AI and the enormous opportunities here, not only concentrate on the risks. In Estonia, we already have more than 100 use cases of AI to improve our public services.

Join us today at 11:30 CET - what to do and what not as the DPO…

Hej! Det finns faktiskt en EU + svensk lag om sena betalningar, tyvärr rätt tandlös. Om båda parter avtalat om betalningstid om 30 + dgr är det ok. Bättre att peka på den (frivilliga) branschöverenskommelse om många industribolag träffat där de lovar 30 dgr. Vi har fått igenom affärsmässiga villkor genom att peka tydligt på överenskommelsen (där Volvo, Ericsson, mfl) är med. Läs mer 👉 betaltider.se/koden/

Något som vi tillsammans kan hjälpas åt beivra?! Lagstifta om 30dagar? I slutändan handlar det om att betala löner till anställda enl gällande kollektivavtal. @foretagarna @SwedishPM @moderaterna @socialdemokrat

#ChatGPT tillgänglig i Italien igen efter att vissa extra åtgärder implementerats. Intressant!

Curious what will happen to lawyers with the adoption of AI? Take your chance to work with us in a niche that grows exceptionally 🚀 - apply for our open position as IT associate today #sthlmtech #sthlmai

Se till att jobba i en nisch som växer iom AIs utveckling - Kom och jobba med oss ✨sök jobbet som associate! #juristjobb #sthlmai #sthlmtech

Great things ahead for privacy in Sweden 🇸🇪 I comment on the coming new laws on #privacy in Sweden for @PrivacyPros The importance of our regulator’s proactive approach on launching an innovation hub and being more forward leaning in enforcement SCA not be stressed enough ✨

🚨🇪🇺🇺🇸announce resumption negotiations on #eEvidence #CloudAct agreement! Essential to facilitate law enforcement work/resolve conflicts of laws/provide legal certainty while providing HR safeguards. Lots of hurdles (👉doi.org/10.1093/idpl/i…) but important to move FAST/succeed

@codyplof Oh, one more thing… Check out @WOOLandPRINCE merino wool smart casual, or just comfy.

I’m in need of some new clothes. Preferably workleisure; comfy stuff I can wear WFH or at the office. Comfort over everything. Any recommendations?